Framed-IP-Address in Start Accounting message
We have a 5400 plataform configured with Radius Accounting and I am seeing that the attribute 8 (Framed-IP-Address) appears only in the Stop message.
The cuestions is...how i can to do that the attribute 8 will be included in the Start message too?
Regards
CONFIGURATION
ip radius source-interface GigabitEthernet0/0.63
aaa new-model
radius-server host 200.49.193.225 auth-port 1812 acct-port 1813
radius-server key cisco1
aaa group server radius RADIUS-VLZ1
server 200.49.193.225
aaa dnis map enable
aaa dnis map 1151307063 authentication ppp group RADIUS-VLZ1
aaa dnis map 1151307063 accounting network start-stop group RADIUS-VLZ1
aaa authentication login default group RADIUS-VLZ1 local
no aaa authentication ppp default local
aaa authentication ppp default if-needed radius
aaa authorization network radius
aaa accounting exec default start-stop group RADIUS-VLZ1
aaa accounting network default start-stop group RADIUS-VLZ1
radius-server attribute 8 inc
DEBUG RADIUS
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
*Jul 15 16:56:32.856: RADIUS: Acct-Session-Id [44] 10 "00000192"
*Jul 15 16:56:32.856: RADIUS: User-Name [1] 9 "italtel"
*Jul 15 16:56:32.856: RADIUS: Acct-Authentic [45] 6 RADIUS
[1]
*Jul 15 16:56:32.856: RADIUS: Acct-Status-Type [40] 6 Start
[1]
*Jul 15 16:56:32.856: RADIUS: Calling-Station-Id [31] 12 "1147876876"
*Jul 15 16:56:32.856: RADIUS: Called-Station-Id [30] 14 "541151307063"
*Jul 15 16:56:32.856: RADIUS: NAS-Port [5] 6 544
*Jul 15 16:56:32.856: RADIUS: NAS-Port-Id [87] 9 "tty4/04"
*Jul 15 16:56:32.856: RADIUS: NAS-Port-Type [61] 6 Async
[0]
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
*Jul 15 16:55:23.508: RADIUS: Framed-IP-Address [8] 6 10.82.94.11
*Jul 15 16:55:23.508: RADIUS: User-Name [1] 6 "pepe"
*Jul 15 16:55:23.508: RADIUS: Acct-Authentic [45] 6 RADIUS
[1]
*Jul 15 16:55:23.508: RADIUS: Acct-Session-Time [46] 6 15
*Jul 15 16:55:23.508: RADIUS: Acct-Input-Octets [42] 6 3613
*Jul 15 16:55:23.508: RADIUS: Acct-Output-Octets [43] 6 118
*Jul 15 16:55:23.508: RADIUS: Acct-Input-Packets [47] 6 55
*Jul 15 16:55:23.508: RADIUS: Acct-Output-Packets [48] 6 7
*Jul 15 16:55:23.508: RADIUS: Acct-Terminate-Cause[49] 6 user-request
[1]
*Jul 15 16:55:23.508: RADIUS: Acct-Status-Type [40] 6 Stop
Hi ,
Try using:
aaa accounting delay-start
Regards,
~JG
Do rate helpful posts
Similar Messages
-
AP 1252 in autonomous mode not sending framed-ip-address
I was attempting to use the Websense RADIUS Agent to transparently map wireless users in it's database. This is done by passing the RADIUS accounting packets through the websense server where Websense can read them and map the username and password. This works for our Cisco VPN clients and Anyconnect clients. The problem I have is that the 1252 AP does not send the framed-ip-address in the RADIUS accounting packet. The AP should know the client IP since it can be seen with "show dot11 association".
For whatever reason, the AP doesn't know the IP address. This is verified by enabling aaa acounting delay-start which delays the sending accounting packets until the peer IP is known. With this command in, no accounting packets are ever sent from the AP.
Does anyone know why the AP doesn't include the framed-ip-address in the accounting packets? Or, why the AP is not able to learn the peer IP address from the client association information?
Thanks,
MarkFor a session to be disconnected, the values in one or more of the key fields in the POD request must match the values for a session on one of the network access server ports. Which values must match depends on the auth-type attribute defined in the command. If noauth-type is specified, all four values must match. If no match is found, all connections remain intact and an error response is returned. The key fields are as follows:
User-Name
Framed-IP-Address
Session-Id
Server-Key -
Framed IP Attribute missing in Accounting-Start messages from the ISG
Framed IP Attribute missing in Accounting-Start messages from the ISG for the TAL Users. Account-Logon users and Interim updates have the Framed-IP though.
We have the following command already enabled: aaa accounting include auth-profile framed-ip-address aaa accounting delay-start
Any ideas or workarounds please?
Debug:
Aug 27 19:36:02.213: RADIUS(00000181): Send Accounting-Request to X.X.X.X:1813 id 21647/201, len 406
Aug 27 19:36:02.213: RADIUS: authenticator 23 FC FF 1B AC 01 77 B6 - 89 FE E2 9A 4E AA 0B 32
Aug 27 19:36:02.213: RADIUS: Acct-Session-Id [44] 10 "000001BB"
Aug 27 19:36:02.213: RADIUS: Framed-Protocol [7] 6 PPP [1]
Aug 27 19:36:02.213: RADIUS: Vendor, Cisco [26] 20
Aug 27 19:36:02.213: RADIUS: ssg-service-info [251] 14 "NBWAUTHSVC01"
Aug 27 19:36:02.213: RADIUS: Vendor, Cisco [26] 34
Aug 27 19:36:02.213: RADIUS: Cisco AVpair [1] 28 "parent-session-id=000001BA"
Aug 27 19:36:02.213: RADIUS: User-Name [1] 22 "[email protected]"
Aug 27 19:36:02.213: RADIUS: Acct-Status-Type [40] 6 Start [1]
Aug 27 19:36:02.213: RADIUS: Vendor, Cisco [26] 25
Aug 27 19:36:02.213: RADIUS: Cisco AVpair [1] 19 "portbundle=enable"
Aug 27 19:36:02.213: RADIUS: Vendor, Cisco [26] 23
Aug 27 19:36:02.213: RADIUS: ssg-account-info [250] 17 "SX.X.X.X"
Aug 27 19:36:02.213: RADIUS: Calling-Station-Id [31] 19 "00-15-00-73-XX-XX"
Aug 27 19:36:02.213: RADIUS: NAS-Port-Type [61] 6 Virtual [5]
Aug 27 19:36:02.213: RADIUS: NAS-Port [5] 6 0
Aug 27 19:36:02.213: RADIUS: NAS-Port-Id [87] 11 "0/2/0/200"
Aug 27 19:36:02.213: RADIUS: Vendor, Cisco [26] 46
Aug 27 19:36:02.213: RADIUS: Cisco AVpair [1] 40 "remote-id-tag=020a00000a050001000800c8"
Aug 27 19:36:02.213: RADIUS: Vendor, Cisco [26] 36
Aug 27 19:36:02.213: RADIUS: Cisco AVpair [1] 30 "vendor-class-id-tag=MSFT 5.0"
Aug 27 19:36:02.213: RADIUS: Service-Type [6] 6 Framed [2]
Aug 27 19:36:02.213: RADIUS: NAS-IP-Address [4] 6 X.X.X.X
Aug 27 19:36:02.213: RADIUS: Ascend-Session-Svr-K[151] 10
Aug 27 19:36:02.213: RADIUS: 39 45 41 39 39 36 44 44 [ 9EA996DD]
Aug 27 19:36:02.213: RADIUS: Event-Timestamp [55] 6 1346096162
Aug 27 19:36:02.213: RADIUS: Nas-Identifier [32] 24 "LAB-RAS01"
Aug 27 19:36:02.213: RADIUS: Acct-Delay-Time [41] 6 0
Thanks in advance.It seems you already have tac case opened for this issue? Let me know if that is not the case.
-
Got a question on mail. We got two e-mail addresses, both different, but messages are picked up from the same server at Vodafone. Received at my iMac I want them to be splitted to two accounts, depending on each e-mail address. How to do this?
Hello,
Could you please clarify you have two email addresses [email protected] and [email protected] each with it's own password and you want these delivered to differnt OS X user accounts or seperate folders within Mail?
mrtotes -
I'm a new Help user, and i just asked a question, had to go to email and confirmed email address to start the account, now how do i find the question/answer i had just asked/posted?
Thanks!!! Things are so easy when you know how.
-
How to recover Outlook Express data, such as messages, the Address Book, mail accounts, and news?
Outlook Express Repair Toolbox software is selected utility to repair the damaged/broken emails from OE. It provides best DBX Recovery service for
chosen database including orphan files; afterward allows storing all revived files in EML, MSG, PST, RTF and DBX.
Offers search option to add file for healing process.
It includes understandable algorithm to recover DBX as well conversion in safe hands.
It is practicable with each Windows OS like Win 8.1, Win 7 (32 bit- 64 bit), supports all editions of OE, and MS Outlook.
Everybody efficiently can retrieve the lost emails plus can preserve the integrity.
Trial version of tool is activated for 15 emails but ample to satisfy.
Download -
http://www.outlookexpress.repairtoolbox.com/ -
L2TP and fixed Framed IP Address for VPN user
Hi,
I have a running L2TP/IPsec VPN setup with authentification against a radius server (freeradius2 witch mysql). I would like to have some of my VPN users get a fixed IP address instead of the dynamically assigned IP Pool.
The radius server is returning the correct parameters, I think.
I hope someone can help me.
It´s a Cisco 892 Integrated Service Router.
Router Config:
=============================================================
Current configuration : 8239 bytes
! Last configuration change at 10:44:26 CEST Fri Mar 30 2012 by root
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service internal
hostname vpngw2
boot-start-marker
boot config usbflash0:CVO-BOOT.CFG
boot-end-marker
logging buffered 51200 warnings
enable secret 5 secret
aaa new-model
aaa authentication login default local group radius
aaa authentication login userauthen local group radius
aaa authentication ppp default group radius local
aaa authorization exec default local
aaa authorization network groupauthor local
aaa accounting delay-start
aaa accounting update newinfo
aaa accounting exec default
action-type start-stop
group radius
aaa accounting network default
action-type start-stop
group radius
aaa accounting resource default
action-type start-stop
group radius
aaa session-id common
clock timezone CET 1 0
clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 3:00
ip domain name aspect-online.de
ip name-server 10.28.1.31
ip inspect WAAS flush-timeout 10
ip inspect name DEFAULT100 ftp
ip inspect name DEFAULT100 h323
ip inspect name DEFAULT100 icmp
ip inspect name DEFAULT100 netshow
ip inspect name DEFAULT100 rcmd
ip inspect name DEFAULT100 realaudio
ip inspect name DEFAULT100 rtsp
ip inspect name DEFAULT100 esmtp
ip inspect name DEFAULT100 sqlnet
ip inspect name DEFAULT100 streamworks
ip inspect name DEFAULT100 tftp
ip inspect name DEFAULT100 tcp
ip inspect name DEFAULT100 udp
ip inspect name DEFAULT100 vdolive
ip cef
no ipv6 cef
virtual-profile if-needed
multilink bundle-name authenticated
async-bootp dns-server 10.28.1.31
async-bootp nbns-server 10.28.1.31
vpdn enable
vpdn authen-before-forward
vpdn authorize directed-request
vpdn-group L2TP
! Default L2TP VPDN group
accept-dialin
protocol l2tp
virtual-template 1
no l2tp tunnel authentication
license udi pid -K9 sn FCZ
username root password 7 secret
ip ssh source-interface FastEthernet8
ip ssh version 2
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
lifetime 3600
crypto isakmp key mykey address 0.0.0.0 no-xauth
crypto ipsec transform-set configl2tp esp-3des esp-sha-hmac
mode transport
crypto dynamic-map config-map-l2tp 10
set nat demux
set transform-set configl2tp
crypto map vpnl2tp 10 ipsec-isakmp dynamic config-map-l2tp
interface BRI0
no ip address
encapsulation hdlc
shutdown
isdn termination multidrop
interface FastEthernet0
no ip address
spanning-tree portfast
interface FastEthernet1
no ip address
spanning-tree portfast
<snip>
interface FastEthernet7
no ip address
spanning-tree portfast
interface FastEthernet8
ip address 10.28.1.97 255.255.255.0
ip access-group vpn_to_lan out
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
interface Virtual-Template1
ip unnumbered GigabitEthernet0
ip access-group vpn_to_inet_lan in
ip nat inside
ip virtual-reassembly in
peer default ip address pool l2tpvpnpool
ppp encrypt mppe 128
ppp authentication chap
interface GigabitEthernet0
description WAN Port
ip address x.x.x.39 255.255.255.0
ip access-group from_inet in
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
crypto map vpnl2tp
interface Vlan1
no ip address
shutdown
ip local pool l2tpvpnpool 192.168.252.3 192.168.252.199
ip local pool remotepool 192.168.252.240 192.168.252.243
ip forward-protocol nd
no ip http server
no ip http secure-server
ip nat log translations syslog
ip nat inside source route-map natmap interface GigabitEthernet0 overload
ip route 0.0.0.0 0.0.0.0 x.x.x.33
ip access-list extended from_inet
<snip>
ip access-list extended nat_clients
permit ip 192.168.252.0 0.0.0.255 any
ip access-list extended vpn_to_inet_lan
<snip>
ip access-list extended vpn_to_lan
<snip>
deny ip any any log-input
logging trap debugging
logging facility local2
logging 10.28.1.42
no cdp run
route-map natmap permit 10
match ip address nat_clients
radius-server attribute 8 include-in-access-req
radius-server host 10.27.1.228 auth-port 1812 acct-port 1813
radius-server key 7 mykey
radius-server vsa send accounting
radius-server vsa send authentication
control-plane
mgcp profile default
banner login ^C
Hostname: vpngw2
Model: Cisco 892 Integrated Service Router
Description: L2TP/IPsec VPN Gateway with Radius Auth
^C
line con 0
line aux 0
line vty 0 4
access-class 23 in
privilege level 15
transport input telnet ssh
line vty 5 15
access-class 23 in
privilege level 15
transport input telnet ssh
=============================================================
User Config in Radius (tying multiple attributes):
=============================================================
Attribute | op | Value
Service-Type | = | Framed-User
Cisco-AVPair | = | vpdn:ip-addresses=192.168.252.220
Framed-IP-Address | := | 192.168.252.221
Cisco-AVPair | = | ip:addr-pool=remotepool
=============================================================
Debug Log from freeradius2:
=============================================================
rad_recv: Access-Request packet from host 10.28.1.97 port 1645, id=7, length=100
Framed-Protocol = PPP
User-Name = "me1"
CHAP-Password = 0x01b8b897de00317a75c68ee9ce473cf8b8
Connect-Info = "100000000"
NAS-Port-Type = Sync
NAS-Port = 10007
NAS-Port-Id = "Uniq-Sess-ID7"
Service-Type = Framed-User
NAS-IP-Address = 10.28.1.97
# Executing section authorize from file /etc/raddb/sites-enabled/default
+- entering group authorize {...}
++[preprocess] returns ok
[chap] Setting 'Auth-Type := CHAP'
++[chap] returns ok
++[mschap] returns noop
++[digest] returns noop
[suffix] No '@' in User-Name = "me1", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
[files] users: Matched entry DEFAULT at line 172
++[files] returns ok
[sql] expand: %{User-Name} -> me1
[sql] sql_set_user escaped user --> 'me1'
rlm_sql (sql): Reserving sql socket id: 4
[sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'me1' ORDER BY id
[sql] User found in radcheck table
[sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'me1' ORDER BY id
[sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'me1' ORDER BY priority
rlm_sql (sql): Released sql socket id: 4
++[sql] returns ok
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING: Auth-Type already set. Not setting to PAP
++[pap] returns noop
Found Auth-Type = CHAP
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group CHAP {...}
[chap] login attempt by "me1" with CHAP password
[chap] Using clear text password "test" for user me1 authentication.
[chap] chap user me1 authenticated succesfully
++[chap] returns ok
Login OK: [me1/<CHAP-Password>] (from client vpngw2 port 10007)
# Executing section post-auth from file /etc/raddb/sites-enabled/default
+- entering group post-auth {...}
++[exec] returns noop
Sending Access-Accept of id 7 to 10.28.1.97 port 1645
Framed-Protocol = PPP
Framed-Compression = Van-Jacobson-TCP-IP
Framed-IP-Address := 192.168.252.221
Cisco-AVPair = "vpdn:ip-addresses=192.168.252.220"
Service-Type = Framed-User
Finished request 0.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Accounting-Request packet from host 10.28.1.97 port 1646, id=19, length=213
Acct-Session-Id = "00000011"
Tunnel-Type:0 = L2TP
Tunnel-Medium-Type:0 = IPv4
Tunnel-Server-Endpoint:0 = "x.x.x.39"
Tunnel-Client-Endpoint:0 = "x.x.x.34"
Tunnel-Assignment-Id:0 = "L2TP"
Tunnel-Client-Auth-Id:0 = "me1"
Tunnel-Server-Auth-Id:0 = "vpngw2"
Framed-Protocol = PPP
Framed-IP-Address = 192.168.252.9
User-Name = "me1"
Cisco-AVPair = "connect-progress=LAN Ses Up"
Acct-Authentic = RADIUS
Acct-Status-Type = Start
Connect-Info = "100000000"
NAS-Port-Type = Sync
NAS-Port = 10007
NAS-Port-Id = "Uniq-Sess-ID7"
Service-Type = Framed-User
NAS-IP-Address = 10.28.1.97
Acct-Delay-Time = 0
# Executing section preacct from file /etc/raddb/sites-enabled/default
+- entering group preacct {...}
++[preprocess] returns ok
[acct_unique] Hashing 'NAS-Port = 10007,Client-IP-Address = 10.28.1.97,NAS-IP-Address = 10.28.1.97,Acct-Session-Id = "00000011",User-Name = "me1"'
[acct_unique] Acct-Unique-Session-ID = "1fdd95abea6cfac2".
++[acct_unique] returns ok
[suffix] No '@' in User-Name = "me1", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
++[files] returns noop
# Executing section accounting from file /etc/raddb/sites-enabled/default
+- entering group accounting {...}
[detail] expand: %{Packet-Src-IP-Address} -> 10.28.1.97
[detail] expand: /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d -> /var/log/radius/radacct/10.28.1.97/detail-20120330
[detail] /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radius/radacct/10.28.1.97/detail-20120330
[detail] expand: %t -> Fri Mar 30 11:20:07 2012
++[detail] returns ok
++[unix] returns ok
[radutmp] expand: /var/log/radius/radutmp -> /var/log/radius/radutmp
[radutmp] expand: %{User-Name} -> me1
++[radutmp] returns ok
[sql] expand: %{User-Name} -> me1
[sql] sql_set_user escaped user --> 'me1'
[sql] expand: %{Acct-Delay-Time} -> 0
[sql] expand: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}',
rlm_sql (sql): Reserving sql socket id: 3
rlm_sql (sql): Released sql socket id: 3
++[sql] returns ok
++[exec] returns noop
[attr_filter.accounting_response] expand: %{User-Name} -> me1
attr_filter: Matched entry DEFAULT at line 12
++[attr_filter.accounting_response] returns updated
Sending Accounting-Response of id 19 to 10.28.1.97 port 1646
Finished request 1.
Cleaning up request 1 ID 19 with timestamp +53
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Accounting-Request packet from host 10.28.1.97 port 1646, id=20, length=407
Acct-Session-Id = "00000011"
Tunnel-Type:0 = L2TP
Tunnel-Medium-Type:0 = IPv4
Tunnel-Server-Endpoint:0 = "x.x.x.39"
Tunnel-Client-Endpoint:0 = "x.x.x.34"
Tunnel-Assignment-Id:0 = "L2TP"
Tunnel-Client-Auth-Id:0 = "me1"
Tunnel-Server-Auth-Id:0 = "vpngw2"
Framed-Protocol = PPP
Framed-IP-Address = 192.168.252.9
Cisco-AVPair = "ppp-disconnect-cause=Received LCP TERMREQ from peer"
User-Name = "me1"
Acct-Authentic = RADIUS
Cisco-AVPair = "connect-progress=LAN Ses Up"
Cisco-AVPair = "nas-tx-speed=100000000"
Cisco-AVPair = "nas-rx-speed=100000000"
Acct-Session-Time = 5
Acct-Input-Octets = 5980
Acct-Output-Octets = 120
Acct-Input-Packets = 47
Acct-Output-Packets = 11
Acct-Terminate-Cause = User-Request
Cisco-AVPair = "disc-cause-ext=PPP Receive Term"
Acct-Status-Type = Stop
Connect-Info = "100000000"
NAS-Port-Type = Sync
NAS-Port = 10007
NAS-Port-Id = "Uniq-Sess-ID7"
Service-Type = Framed-User
NAS-IP-Address = 10.28.1.97
Acct-Delay-Time = 0
# Executing section preacct from file /etc/raddb/sites-enabled/default
+- entering group preacct {...}
++[preprocess] returns ok
[acct_unique] Hashing 'NAS-Port = 10007,Client-IP-Address = 10.28.1.97,NAS-IP-Address = 10.28.1.97,Acct-Session-Id = "00000011",User-Name = "me1"'
[acct_unique] Acct-Unique-Session-ID = "1fdd95abea6cfac2".
++[acct_unique] returns ok
[suffix] No '@' in User-Name = "me1", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
++[files] returns noop
# Executing section accounting from file /etc/raddb/sites-enabled/default
+- entering group accounting {...}
[detail] expand: %{Packet-Src-IP-Address} -> 10.28.1.97
[detail] expand: /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d -> /var/log/radius/radacct/10.28.1.97/detail-20120330
[detail] /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radius/radacct/10.28.1.97/detail-20120330
[detail] expand: %t -> Fri Mar 30 11:20:12 2012
++[detail] returns ok
++[unix] returns ok
[radutmp] expand: /var/log/radius/radutmp -> /var/log/radius/radutmp
[radutmp] expand: %{User-Name} -> me1
++[radutmp] returns ok
[sql] expand: %{User-Name} -> me1
[sql] sql_set_user escaped user --> 'me1'
[sql] expand: %{Acct-Input-Gigawords} ->
[sql] ... expanding second conditional
[sql] expand: %{Acct-Input-Octets} -> 5980
[sql] expand: %{Acct-Output-Gigawords} ->
[sql] ... expanding second conditional
[sql] expand: %{Acct-Output-Octets} -> 120
[sql] expand: %{Acct-Delay-Time} -> 0
[sql] expand: UPDATE radacct SET acctstoptime = '%S', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_stop = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}' -> UPDATE radacct SET acctstoptime = '2012-03-30 11:20:12', acctsessiontime = '5', acctinputoctets = '0' << 32 | '5980', acctoutputoctets = '0' << 32 |
rlm_sql (sql): Reserving sql socket id: 2
rlm_sql (sql): Released sql socket id: 2
++[sql] returns ok
++[exec] returns noop
[attr_filter.accounting_response] expand: %{User-Name} -> me1
attr_filter: Matched entry DEFAULT at line 12
++[attr_filter.accounting_response] returns updated
Sending Accounting-Response of id 20 to 10.28.1.97 port 1646
Finished request 2.
Cleaning up request 2 ID 20 with timestamp +58
Going to the next request
Waking up in 0.1 seconds.
Cleaning up request 0 ID 7 with timestamp +53
Ready to process requests.
=============================================================
Log From Cisco Router:
=============================================================
Mar 30 11:20:07 vpngw2 1217: Mar 30 09:21:51.414: RADIUS/ENCODE(00000015):Orig. component type = VPDN
Mar 30 11:20:07 vpngw2 1218: Mar 30 09:21:51.414: RADIUS: DSL line rate attributes successfully added
Mar 30 11:20:07 vpngw2 1219: Mar 30 09:21:51.414: RADIUS(00000015): Config NAS IP: 0.0.0.0
Mar 30 11:20:07 vpngw2 1220: Mar 30 09:21:51.414: RADIUS(00000015): Config NAS IPv6: ::
Mar 30 11:20:07 vpngw2 1221: Mar 30 09:21:51.414: RADIUS/ENCODE: No idb found! Framed IP Addr might not be included
Mar 30 11:20:07 vpngw2 1222: Mar 30 09:21:51.414: RADIUS/ENCODE(00000015): acct_session_id: 17
Mar 30 11:20:07 vpngw2 1223: Mar 30 09:21:51.414: RADIUS(00000015): sending
Mar 30 11:20:07 vpngw2 1224: Mar 30 09:21:51.418: RADIUS/ENCODE: Best Local IP-Address 10.28.1.97 for Radius-Server 10.27.1.228
Mar 30 11:20:07 vpngw2 1225: Mar 30 09:21:51.418: RADIUS(00000015): Send Access-Request to 10.27.1.228:1812 id 1645/7, len 100
Mar 30 11:20:07 vpngw2 1226: Mar 30 09:21:51.418: RADIUS: authenticator DE 5F 2E 3E EF BF 50 F4 - 49 C3 4F BE 1A 66 72 22
Mar 30 11:20:07 vpngw2 1227: Mar 30 09:21:51.418: RADIUS: Framed-Protocol [7] 6 PPP [1]
Mar 30 11:20:07 vpngw2 1228: Mar 30 09:21:51.418: RADIUS: User-Name [1] 5 "me1"
Mar 30 11:20:07 vpngw2 1229: Mar 30 09:21:51.418: RADIUS: CHAP-Password [3] 19 *
Mar 30 11:20:07 vpngw2 1230: Mar 30 09:21:51.418: RADIUS: Connect-Info [77] 11 "100000000"
Mar 30 11:20:07 vpngw2 1231: Mar 30 09:21:51.418: RADIUS: NAS-Port-Type [61] 6 Sync [1]
Mar 30 11:20:07 vpngw2 1232: Mar 30 09:21:51.418: RADIUS: NAS-Port [5] 6 10007
Mar 30 11:20:07 vpngw2 1233: Mar 30 09:21:51.418: RADIUS: NAS-Port-Id [87] 15 "Uniq-Sess-ID7"
Mar 30 11:20:07 vpngw2 1234: Mar 30 09:21:51.418: RADIUS: Service-Type [6] 6 Framed [2]
Mar 30 11:20:07 vpngw2 1235: Mar 30 09:21:51.418: RADIUS: NAS-IP-Address [4] 6 10.28.1.97
Mar 30 11:20:07 vpngw2 1236: Mar 30 09:21:51.418: RADIUS(00000015): Sending a IPv4 Radius Packet
Mar 30 11:20:07 vpngw2 1237: Mar 30 09:21:51.418: RADIUS(00000015): Started 5 sec timeout
Mar 30 11:20:07 vpngw2 1238: Mar 30 09:21:51.422: RADIUS: Received from id 1645/7 10.27.1.228:1812, Access-Accept, len 85
Mar 30 11:20:07 vpngw2 1239: Mar 30 09:21:51.422: RADIUS: authenticator 25 CD 93 D5 78 2C F4 4F - F2 66 2C 45 8D D4 E1 16
Mar 30 11:20:07 vpngw2 1240: Mar 30 09:21:51.422: RADIUS: Framed-Protocol [7] 6 PPP [1]
Mar 30 11:20:07 vpngw2 1241: Mar 30 09:21:51.422: RADIUS: Framed-Compression [13] 6 VJ TCP/IP Header Compressi[1]
Mar 30 11:20:07 vpngw2 1242: Mar 30 09:21:51.422: RADIUS: Framed-IP-Address [8] 6 192.168.252.221
Mar 30 11:20:07 vpngw2 1243: Mar 30 09:21:51.422: RADIUS: Vendor, Cisco [26] 41
Mar 30 11:20:07 vpngw2 1244: Mar 30 09:21:51.422: RADIUS: Cisco AVpair [1] 35 "vpdn:ip-addresses=192.168.252.220"
Mar 30 11:20:07 vpngw2 1245: Mar 30 09:21:51.422: RADIUS: Service-Type [6] 6 Framed [2]
Mar 30 11:20:07 vpngw2 1246: Mar 30 09:21:51.426: RADIUS(00000015): Received from id 1645/7
Mar 30 11:20:07 vpngw2 1247: Mar 30 09:21:51.438: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to up
Mar 30 11:20:07 vpngw2 1248: Mar 30 09:21:51.442: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
Mar 30 11:20:07 vpngw2 1249: Mar 30 09:21:51.478: RADIUS/ENCODE(00000015):Orig. component type = VPDN
Mar 30 11:20:07 vpngw2 1250: Mar 30 09:21:51.478: RADIUS(00000015): Config NAS IP: 0.0.0.0
Mar 30 11:20:07 vpngw2 1251: Mar 30 09:21:51.478: RADIUS(00000015): Config NAS IPv6: ::
Mar 30 11:20:07 vpngw2 1252: Mar 30 09:21:51.478: RADIUS(00000015): sending
Mar 30 11:20:07 vpngw2 1253: Mar 30 09:21:51.478: RADIUS/ENCODE: Best Local IP-Address 10.28.1.97 for Radius-Server 10.27.1.228
Mar 30 11:20:07 vpngw2 1254: Mar 30 09:21:51.478: RADIUS(00000015): Send Accounting-Request to 10.27.1.228:1813 id 1646/19, len 213
Mar 30 11:20:07 vpngw2 1255: Mar 30 09:21:51.478: RADIUS: authenticator 1B E0 A3 DF 16 7F F1 8D - E5 7F BD 88 50 01 73 53
Mar 30 11:20:07 vpngw2 1256: Mar 30 09:21:51.478: RADIUS: Acct-Session-Id [44] 10 "00000011"
Mar 30 11:20:07 vpngw2 1257: Mar 30 09:21:51.478: RADIUS: Tunnel-Type [64] 6 00:
Mar 30 11:20:07 vpngw2 1258: L2TP [3]
Mar 30 11:20:07 vpngw2 1259: Mar 30 09:21:51.478: RADIUS: Tunnel-Medium-Type [65] 6 00:IPv4 [1]
Mar 30 11:20:07 vpngw2 1260: Mar 30 09:21:51.478: RADIUS: Tunnel-Server-Endpoi[67] 16 "x.x.x.39"
Mar 30 11:20:07 vpngw2 1261: Mar 30 09:21:51.478: RADIUS: Tunnel-Client-Endpoi[66] 16 "x.x.x.34"
Mar 30 11:20:07 vpngw2 1262: Mar 30 09:21:51.478: RADIUS: Tunnel-Assignment-Id[82] 6 "L2TP"
Mar 30 11:20:07 vpngw2 1263: Mar 30 09:21:51.478: RADIUS: Tunnel-Client-Auth-I[90] 5 "me1"
Mar 30 11:20:07 vpngw2 1264: Mar 30 09:21:51.478: RADIUS: Tunnel-Server-Auth-I[91] 8 "vpngw2"
Mar 30 11:20:07 vpngw2 1265: Mar 30 09:21:51.478: RADIUS: Framed-Protocol [7] 6 PPP [1]
Mar 30 11:20:07 vpngw2 1266: Mar 30 09:21:51.478: RADIUS: Framed-IP-Address [8] 6 192.168.252.9
Mar 30 11:20:07 vpngw2 1267: Mar 30 09:21:51.478: RADIUS: User-Name [1] 5 "me1"
Mar 30 11:20:07 vpngw2 1268: Mar 30 09:21:51.478: RADIUS: Vendor, Cisco [26] 35
Mar 30 11:20:07 vpngw2 1269: Mar 30 09:21:51.478: RADIUS: Cisco AVpair [1] 29 "connect-progress=LAN Ses Up"
Mar 30 11:20:07 vpngw2 1270: Mar 30 09:21:51.478: RADIUS: Acct-Authentic [45] 6 RADIUS [1]
Mar 30 11:20:07 vpngw2 1271: Mar 30 09:21:51.482: RADIUS: Acct-Status-Type [40] 6 Start [1]
Mar 30 11:20:07 vpngw2 1272: Mar 30 09:21:51.482: RADIUS: Connect-Info [77] 11 "100000000"
Mar 30 11:20:07 vpngw2 1273: Mar 30 09:21:51.482: RADIUS: NAS-Port-Type [61] 6 Sync [1]
Mar 30 11:20:07 vpngw2 1274: Mar 30 09:21:51.482: RADIUS: NAS-Port [5] 6 10007
Mar 30 11:20:08 vpngw2 1275: Mar 30 09:21:51.482: RADIUS: NAS-Port-Id [87] 15 "Uniq-Sess-ID7"
Mar 30 11:20:08 vpngw2 1276: Mar 30 09:21:51.482: RADIUS: Service-Type [6] 6 Framed [2]
Mar 30 11:20:08 vpngw2 1277: Mar 30 09:21:51.482: RADIUS: NAS-IP-Address [4] 6 10.28.1.97
Mar 30 11:20:08 vpngw2 1278: Mar 30 09:21:51.482: RADIUS: Acct-Delay-Time [41] 6 0
Mar 30 11:20:08 vpngw2 1279: Mar 30 09:21:51.482: RADIUS(00000015): Sending a IPv4 Radius Packet
Mar 30 11:20:08 vpngw2 1280: Mar 30 09:21:51.482: RADIUS(00000015): Started 5 sec timeout
Mar 30 11:20:08 vpngw2 1281: Mar 30 09:21:51.486: RADIUS: Received from id 1646/19 10.27.1.228:1813, Accounting-response, len 20
Mar 30 11:20:08 vpngw2 1282: Mar 30 09:21:51.486: RADIUS: authenticator 73 5E 95 46 5B 57 B1 4A - 44 4F 7C 71 F0 26 AA A4
Mar 30 11:20:12 vpngw2 1283: Mar 30 09:21:56.282: RADIUS/ENCODE(00000015):Orig. component type = VPDN
Mar 30 11:20:12 vpngw2 1284: Mar 30 09:21:56.282: RADIUS(00000015): Config NAS IP: 0.0.0.0
Mar 30 11:20:12 vpngw2 1285: Mar 30 09:21:56.282: RADIUS(00000015): Config NAS IPv6: ::
Mar 30 11:20:12 vpngw2 1286: Mar 30 09:21:56.282: RADIUS(00000015): sending
Mar 30 11:20:12 vpngw2 1287: Mar 30 09:21:56.282: RADIUS/ENCODE: Best Local IP-Address 10.28.1.97 for Radius-Server 10.27.1.228
Mar 30 11:20:12 vpngw2 1288: Mar 30 09:21:56.286: RADIUS(00000015): Send Accounting-Request to 10.27.1.228:1813 id 1646/20, len 407
Mar 30 11:20:12 vpngw2 1289: Mar 30 09:21:56.286: RADIUS: authenticator 26 7A 27 91 EB 3F 34 C6 - DB 2D 88 F8 B1 A4 C1 12
Mar 30 11:20:12 vpngw2 1290: Mar 30 09:21:56.286: RADIUS: Acct-Session-Id [44] 10 "00000011"
Mar 30 11:20:12 vpngw2 1291: Mar 30 09:21:56.286: RADIUS: Tunnel-Type [64] 6 00:
Mar 30 11:20:12 vpngw2 1292: L2TP [3]
Mar 30 11:20:12 vpngw2 1293: Mar 30 09:21:56.286: RADIUS: Tunnel-Medium-Type [65] 6 00:IPv4 [1]
Mar 30 11:20:12 vpngw2 1294: Mar 30 09:21:56.286: RADIUS: Tunnel-Server-Endpoi[67] 16 "x.x.x.39"
Mar 30 11:20:12 vpngw2 1295: Mar 30 09:21:56.286: RADIUS: Tunnel-Client-Endpoi[66] 16 "x.x.x.34"
Mar 30 11:20:12 vpngw2 1296: Mar 30 09:21:56.286: RADIUS: Tunnel-Assignment-Id[82] 6 "L2TP"
Mar 30 11:20:12 vpngw2 1297: Mar 30 09:21:56.286: RADIUS: Tunnel-Client-Auth-I[90] 5 "me1"
Mar 30 11:20:12 vpngw2 1298: Mar 30 09:21:56.286: RADIUS: Tunnel-Server-Auth-I[91] 8 "vpngw2"
Mar 30 11:20:12 vpngw2 1299: Mar 30 09:21:56.286: RADIUS: Framed-Protocol [7] 6 PPP [1]
Mar 30 11:20:12 vpngw2 1300: Mar 30 09:21:56.286: RADIUS: Framed-IP-Address [8] 6 192.168.252.9
Mar 30 11:20:12 vpngw2 1301: Mar 30 09:21:56.286: RADIUS: Vendor, Cisco [26] 59
Mar 30 11:20:12 vpngw2 1302: Mar 30 09:21:56.286: RADIUS: Cisco AVpair [1] 53 "ppp-disconnect-cause=Received LCP TERMREQ from peer"
Mar 30 11:20:12 vpngw2 1303: Mar 30 09:21:56.286: RADIUS: User-Name [1] 5 "me1"
Mar 30 11:20:12 vpngw2 1304: Mar 30 09:21:56.286: RADIUS: Acct-Authentic [45] 6 RADIUS [1]
Mar 30 11:20:12 vpngw2 1305: Mar 30 09:21:56.286: RADIUS: Vendor, Cisco [26] 35
Mar 30 11:20:12 vpngw2 1306: Mar 30 09:21:56.286: RADIUS: Cisco AVpair [1] 29 "connect-progress=LAN Ses Up"
Mar 30 11:20:12 vpngw2 1307: Mar 30 09:21:56.286: RADIUS: Vendor, Cisco [26] 30
Mar 30 11:20:12 vpngw2 1308: Mar 30 09:21:56.286: RADIUS: Cisco AVpair [1] 24 "nas-tx-speed=100000000"
Mar 30 11:20:12 vpngw2 1309: Mar 30 09:21:56.286: RADIUS: Vendor, Cisco [26] 30
Mar 30 11:20:12 vpngw2 1310: Mar 30 09:21:56.286: RADIUS: Cisco AVpair [1] 24 "nas-rx-speed=100000000"
Mar 30 11:20:12 vpngw2 1311: Mar 30 09:21:56.286: RADIUS: Acct-Session-Time [46] 6 5
Mar 30 11:20:12 vpngw2 1312: Mar 30 09:21:56.286: RADIUS: Acct-Input-Octets [42] 6 5980
Mar 30 11:20:12 vpngw2 1313: Mar 30 09:21:56.286: RADIUS: Acct-Output-Octets [43] 6 120
Mar 30 11:20:12 vpngw2 1314: Mar 30 09:21:56.286: RADIUS: Acct-Input-Packets [47] 6 47
Mar 30 11:20:12 vpngw2 1315: Mar 30 09:21:56.286: RADIUS: Acct-Output-Packets [48] 6 11
Mar 30 11:20:12 vpngw2 1316: Mar 30 09:21:56.286: RADIUS: Acct-Terminate-Cause[49] 6 user-request [1]
Mar 30 11:20:12 vpngw2 1317: Mar 30 09:21:56.286: RADIUS: Vendor, Cisco [26] 39
Mar 30 11:20:12 vpngw2 1318: Mar 30 09:21:56.286: RADIUS: Cisco AVpair [1] 33 "disc-cause-ext=PPP Receive Term"
Mar 30 11:20:12 vpngw2 1319: Mar 30 09:21:56.286: RADIUS: Acct-Status-Type [40] 6 Stop [2]
Mar 30 11:20:12 vpngw2 1320: Mar 30 09:21:56.286: RADIUS: Connect-Info [77] 11 "100000000"
Mar 30 11:20:12 vpngw2 1321: Mar 30 09:21:56.286: RADIUS: NAS-Port-Type [61] 6 Sync [1]
Mar 30 11:20:12 vpngw2 1322: Mar 30 09:21:56.286: RADIUS: NAS-Port [5] 6 10007
Mar 30 11:20:12 vpngw2 1323: Mar 30 09:21:56.286: RADIUS: NAS-Port-Id [87] 15 "Uniq-Sess-ID7"
Mar 30 11:20:12 vpngw2 1324: Mar 30 09:21:56.286: RADIUS: Service-Type [6] 6 Framed [2]
Mar 30 11:20:12 vpngw2 1325: Mar 30 09:21:56.286: RADIUS: NAS-IP-Address [4] 6 10.28.1.97
Mar 30 11:20:12 vpngw2 1326: Mar 30 09:21:56.286: RADIUS: Acct-Delay-Time [41] 6 0
Mar 30 11:20:12 vpngw2 1327: Mar 30 09:21:56.286: RADIUS(00000015): Sending a IPv4 Radius Packet
Mar 30 11:20:12 vpngw2 1328: Mar 30 09:21:56.286: RADIUS(00000015): Started 5 sec timeout
Mar 30 11:20:12 vpngw2 1329: Mar 30 09:21:56.294: RADIUS: Received from id 1646/20 10.27.1.228:1813, Accounting-response, len 20
Mar 30 11:20:12 vpngw2 1330: Mar 30 09:21:56.294: RADIUS: authenticator E1 09 A6 6D 91 C6 B1 B3 - 78 00 FF 4F 25 32 C6 B5
Mar 30 11:20:12 vpngw2 1331: Mar 30 09:21:56.406: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to down
Mar 30 11:20:12 vpngw2 1332: Mar 30 09:21:56.410: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
=============================================================I found the failure.
In the cisco config it must be
aaa authorization network default group radius local
not
aaa authorization network groupauthor local -
Sapscript, check address, variable starting vertical position Solved
Hello all,
On the check that we are creating for Accounts Payable payments, vendors that have all four name fields populated are causing the last line of the address on the check to be too close to the MICR line.
I want the address to start printing conditionally at line 55, 56, or 57, depending upon the number of name fields that are populated. Does anyone have a suggestion on a way to accomplish this? Currently the address starts printing in line 57.
This is the address command as it currently exists.
ADDRESS PARAGRAPH AS
NAME ®UH-ZNME1&, ®UH-ZNME2&, ®UH-ZNME3&, ®UH-ZNME4&,
STREET ®UH-ZSTRA&
POBOX ®UH-ZPFAC& CODE
POSTCODE ®UH-ZPSTL&
REGION ®UH-ZREGI&
CITY ®UH-ZORT1&
COUNTRY ®UH-ZLAND&
FROMCOUNTRY &T001-LAND1&
ENDADDRESS
All answers greatly appreciated.
Thanks
Bruce
Solved!
This is how I sold my problem.
1. Move the address window up two lines.
2. Add the following code before the address command. This code could possibly print one or two blank lines before the address command is executed.
/: IF ®UH-ZNME3& = ' ' AND ®UH-ZNME4& = '
/: ELSEIF ®UH-ZNME4& = ' '
/: ENDIF
Bruce
Message was edited by: Bruce Tjosvold
Message was edited by: Bruce Tjosvold
Message was edited by: Bruce Tjosvoldandre.ramaciotti wrote:And I'm not sure if you should put that & after exec awesome. It works fine here without it.
No & after entries in .xinitrc . You've commented out the awesome entry. -
Framed-IP-Address in RADIUS Access Request for WLC web-auth users
We have a web-auth WLAN (with 7.6.130.0 software on a 2504 WLC) configured to authenticate users through RADIUS. The Framed-IP-Address attribute, representing the client device's IP address is sent in the Accounting Request, as expected. However, this information should be available at the WLC before sending the RADIUS Access Request, since the device is already having an IP address.
So is there a way to configure the WLC to send the Framed-IP-Address attribute in the RADIUS Access Request as well?Hi ,
Try using:
aaa accounting delay-start
Regards,
~JG
Do rate helpful posts -
H323-remote-address in START radius packet
Hi,
I do have Cisco 3945 running as ip-to-ip sip device (IOS 15.1)
I would like to have all sip calls accounted in remote billingg server i already bought.
Here is a snippet from my config:
aaa new-model
aaa group server radius biling
server 77.77.77.77 auth-port 1812 acct-port 1813
aaa accounting send stop-record authentication failure
aaa accounting connection h323 start-stop group biling
voice class aaa 1
accounting template mybiling
gw-accounting aaa
radius-server host 77.77.77.77auth-port 1812 acct-port 1813 key 7 093126371BA2312
radius-server vsa send accounting
radius-server vsa send authentication
call accounting-template voice mybiling flash:mybiling.cdr
dial-peer voice 1 voip
voice-class aaa 1
Radius START and STOP are produced by CUBE, but unfortunately START message hasn't got h323-remote-address.
Aforementioned vsa is incorporated in STOP message.
What is more, of course h323-remote-address is included in mybiling.cdr file
Is there any way to force Cisco to send h323-remote-address in START message?
This is important because billing system have to set concurrent call limitation & make active calls visible.
Thanks in advance,
MaciejHi ,
Try using:
aaa accounting delay-start
Regards,
~JG
Do rate helpful posts -
Move Verizon E-mail address from one account to another
I am wondering if it is possible to move an email address from one account to another. I am the primary account holder for a couple of email addresses - one of which is my mother-in-law. I am discontinuing my Verizon account but she has since started a Verizon FIOS account at her house. I'd like to move her email address to her account so the switch for her is painless (or as painless as possible). Thanks, in advance, for your help.
Yes and No. As of right now they will not move email address unless the name on both accounts match exactly.
-
I started with an iPod, then moved to another state and also purchased an iPhone. I updated my new email address in my account settings, but when receiving updates, my old email address is displayed and cannot be edited. What can I do to make my entire account recognize my new email address and not the old one, which no longer exists? Thank You.
mine still wont let me buy apps or update apps because it keeps asking for my old Apple Identification that i know longer use and havea new one what do i do
-
Adding multiple e-mail alias addresses to an account
Can someone please tell me how to add another e-mail address to my Mail account. I have tried using info from the Mail Help file, both "adding another account" and "adding multiple e-mail alias addresses to an account". Each time when I try to send a test message to or from the added e-mail address, I get the same message: "Cannot send message using the server mail.bellsouth.net. Use the Pop-up menu below to try a different outgoing mail server". The only pop-up is smtp .Mac.
I have tried both methods shown in the HELP file and get the same message. I would really appreciate your help.Are you trying to add a second email account to Mail, or just add a second "(apparently) from" address to an existing account?
If the former, we need to know some more detail, like:
(1) who is the existing account, .mac or bellsouth?
(2) Which are you trying to add, .mac or bellsouth?
(3) I assume your ISP is Bell South?
(4) What are the names of the smtp servers and what are their respective smtp server port numbers?
(5) Are either of them using SSL on the smtp server?
(6) I don't remember whether Tiger Mail has it or not, but in Leopard Mail, on the menu bar under "Window" there is a selection "Connection Doctor." If applicable to Tiger Mail, what does it say about your connections?
(7) Which account can you send mail through and which one can't you send mail through?
(8) Are your receiving mail okay through either or both accounts? Which one(s)?
Now if you are trying to add a second "(apparently) from" address to an existing account, in Mail Prefs > Accounts > mail account > Email Address, just add a second email address separated by a comma like so:
[email protected], [email protected]
You could have an issue with bellsouth or .mac requiring the domain name in the apparently from email address to match the domain name of the smtp mail server. -
Transferring email addresses from one account to another
I'm not sure if this is a good place to post this but after spending a good bit of time on the phone with FiOS customer service and technical support I just feel like venting my frustrations and hope that maybe someone could give me a valid explanation of why this cannot be done.
To give a brief (hopefully) summary of what's going on...
My wife and I are currently in the process of moving from Florida to Maryland because of the current job market and economy situation. As always...the moving process has been a "blast". For at least a few months we will be "between" homes and will be staying with friends. Because of this we had to cancel our FiOS service (which I did last week and it will be shutting off sometime today). Since we've been very please with the actual service FiOS provides we have (or maybe I should say "had") every intention of signing back up with Verizon once we're in a new home in the Maryland area.
So here's where the trouble comes into play...I contacted Verizon to see if it would be possible to somehow transfer our existing Verizon.net email addresses from our account to my friend's account (the person I'm staying with). You would've thought I was asking for a year's worth fo free service. Initially I was told by customer service that this can't be done. They explained that an email address is like a phone number and two separate accounts cannot have the same email address. Thanks for the newsflash! I explained again that what I wanted to do was move my email addresses so they would now be associated with my friends account. This didn't seem like such a horrible request considering my friend pays for FiOS service and with that gets 9 available email addresses....and was only using 2 of them. She ultimately just told me it was something that couldn't be done. But she did inform me of the "Verizon Your Domain" service that would allow current FiOS subscribers to associate their Verizon.net email account with a new domain name that you create. It would cost $20 per year and would allow you to keep your Verizon.net email if you canceled FiOS service. This sounded like an ok option.
But still -- I was curious why I couldn't transfer email addresses. So I then contacted technical support. This time it was explained to me that an email address was like a social security #. It couldn't just be given to another person. Great analogies in use at Verizon....I give them that. I told the guy I was a fellow "techie" and asked him for a more detailed explanation. That's when it got good. That's what killed me. He spent all this time talking about ACL's and routing and how email addresses couldn't be moved because "you're talking about 2 million addresses". Long and short he was trying to say the Verizon email system was just too complex. Finally I told him that it had to be something that could be done....and his exact words were "well sure it can be done...but we're not going to do it if you're not paying for a service". Wow! Great response! I've been a paying customer of FiOS for about two years. I've had some form of service with Verizon for about 15 years (from phone service to mobile service with V-Wireless). I fully understand that I'm no longer paying for FiOS service. But my friend is. And he has 7 email accounts he's not using. So why couldn't they be moved? Because the system is too complex? Give me a break. Like this guy finally admitted...it boils down to money.
Finally I gave up. I told my wife that we'd just have to deal with switching to a new email address. Life will move on. She wanted to try the "Verizon Your Domain" option though. She started doing the process online...had some questions....and decided to call customer service. She got transferred around to three different people...the last of which told her "you need to call a different department" and then CLICK.
Great, great job Verizon. All I ask is if someone could give me some sort of response that makes sense. If you just don't want to offer the transfer option then tell me.
I expect to be in a new home within a month or two. And suddenly Comcast is looking very good.spacedebris wrote:
Well, CS was right when they said that Verizon cannot transfer your email to another account. In order to do that they would have to overwrite the email of your friend ( I dont think your friend would apreciate that ). This is due to a limitation on the email system.
However, you may have another option. If you are going to be getting Verizon service again in the realitivly near future (4-8 weeks or so), Then after your acount is closed, contact tech support. If you get the right agent they will "enable" your email. That way you can continue to use it even though you dont have service any more. Now they cant do this for long but for temporary it can be done. Then once you get your service back, they can then move your existing email to your new account. (this can now be done as they will overwrite your new email with your old).
Now if your going to be without Verizon service for more than a couple months, you may be out of luck but this is one option
umm, oh bhoy!
In fact, a "repoint" of an email address CAN be completed onto another account AND it does not overwrite anything on the receiving account. Each acount, whether its a FiOS account or a copper account, has an account number. The email address is assigned to the account number. The email address can be "repointed" from one account to another, as an 'add-on' to the new account, then it can be 'repointed' back to another account later. HOWEVER, the contract does say that you must have a valid account. AND, Verizon cannot (no company can) allow you to manipulate someone else's account.
as to the "after your acount is closed, contact tech support. If you get the right agent they will "enable" your email", well, the fact is that the account has to be provisioned to an address. So, though I have come accross accounts that seemed to still be "on" after the listed close date, it was not something that verizon's tier 1 tech support can effect (that's who you get on the phone when you call tech support) (note that 'sales' could not do this for you, either) So good luck with that.
What happens is that Verizon will not allow anyone to take your email addresses for at least 6 months.
Before you cancelled you may have had an option to have a notice auto-replied to any email that gets sent to your email address, for a limited amount of time, like they can do with a telephone number ("this number has been changed to . . . . . ") that "this email address is temporarily suspended, or something. . . . I said MAY have had the opportunity. .. . but if it was me, I would get to where you are going and make sure they have Verizon internet account already and have them call verizon tech support (so they can verify their account info) with you standing there so that you can verify your old account info and immediately and plainly ask if you can have an email "repoint" done for you.
my .02
cjacobs001 -
How do I add an Address Book Server account to iPhone 3G iOS 3.1.3
Heya,
I have an iPhone 3G that is running version 3.1.3 of the iPhone OS and I need to add an Address Book Server account (that is being run on Snow Leopard Server to the phone but the only option I have is LDAP. My understanding is that Address Book Server uses CardDAV not LDAP. So I went ahead and added the account by choosing "Settings" -> "Mail, Contacts, Calendars" -> "Add Account..." ->"Other" -> "Contacts - Add LDAP Account" and entered my servers information. After selecting "Next" it prompts me with the following message:
"Cannot Connect Using SSL - Do you want to try setting up the account without SSL?"
I choose "Continue" -> the message disappears and I choose "Save" -> then I'm prompted with this message:
"This account may not be able to search contacts. Are you sure you want to save?"
I choose "Save" and it appears to add it. To verify I exit "Settings" and go to "Address Book" and none of my contacts appear. I even let it sit for an hour on a WiFi connection without any luck. Can someone help?
Thanks!
Tags: ios 3, ios 3.x, addressbook server, addressbookserver, sls, carddav, ldap, iphone 3gHaha, I asked for that.
I get the error "Unable to verify account information" whenever I try and add the account (note I've hidden my email address in the picture)
Maybe you are looking for
-
Itunes Won't Open Send an error report!
Hi I've just downloaded Itunes 6.0 and when I try to open it I get 'Itunes has encountered and error and needs to close send an error report?' I have read up on this and discovered that it may be a quicktime error so I went and downloaded quicktime s
-
A greyness rolls down the screen and then a box appears in the middle saying, in several languages, something like, "You must shut down your computer. Press and hold the button until it shuts down. Then press it again to restart. " The first time i
-
Confused...... have downloaded Apple TV version 3.0 and Itunes 9.02, and really glad to finally see better options for photo viewing. However, as I have a bigger library than the size of my ATV, I am not syncing all pics, but wish to sync some. I hav
-
Using SDO_UTIL.GETVERTICES() together with functions
Hi again I'm having a problem here in my spatial database I trying to use the function TABLE(SDO_UTIL.GETVERTICES(c.shape)) in order to get the coordinates of shapes. But I need to first extract data from spatial functions like the centroid function.
-
Adding field to mb52 by copying it to a zprogram.
HI Guru's, I am using the t code MB52 to display warehouse stocks of a material. This overview is needed to find out what the specific stock per storage bin is. For that we need to copy the standard program from MB52 to a zprogram and add MARD - LGP