Cisco 10000-2P2-2DC Software Guide - Page 205

Chapter 5 Configuring the Layer 2 Tunnel Protocol Access Concentrator and Network Server L2TP Network Server Configuring the LNS for RADIUS Tunnel Accounting To configure the LNS for RADIUS tunnel accounting, perform the following required configuration tasks: • Configuring AAA Accounting Using Named Method Lists, page 5-39 • Configuring RADIUS for Tunnel Accounting, page 5-39 Configuring AAA Accounting Using Named Method Lists To configure AAA accounting using named method lists, enter the following commands beginning in global configuration mode: Step 1 Step 2 Step 3 Command Purpose Router(config)# aaa accounting {system | network | exec | connection | commands level} {default | list-name} {start-stop | stop-only | none} [method1 [method2...]] Creates an accounting method list and enables accounting. The list-name argument is a character string used to name the list you are creating. Router(config)# line [aux | console | tty Enters the line configuration mode for the line to which you want | vty] line-number [ending-line-number] to apply the accounting method list. or Router(config)# interface interface-type interface-number Router(config-line)# accounting {arap | commands level | connection | exec} {default | list-name} Enters the interface configuration mode for the interface to which you want to apply the accounting method list. Applies the accounting method list to a line or a set of lines. or Router(config-if)# ppp accounting {default | list-name} Applies the accounting method list to an interface. Note System accounting does not use named method lists. For system accounting you can define only the default method list. For more information, see the "Configuring Accounting" chapter in the Cisco IOS Security Configuration Guide, Release 12.2. Configuring RADIUS for Tunnel Accounting Cisco IOS Release 12.2(15)BX enhances the AAA accounting feature by adding the ability to include tunnel-related statistics in the RADIUS information. To collect tunnel usage information, you must configure the following attributes on the RADIUS server: • Acct-Tunnel-Connection-Specifies the identifier assigned to the tunnel session. This attribute and the Tunnel-Client-Endpoint and Tunnel-Server-Endpoint attributes provide a way to uniquely identify a tunnel session for auditing purposes. • Acct-Tunnel-Packets-Lost-Specifies the number of packets lost on a given link. OL-2226-23 Cisco 10000 Series Router Software Configuration Guide 5-39