No Start Records in Radius Accounting reports

I do not see any start records in Radius Accounting reports but do see only Stop records ? any ideas as to why this is happening
btw I am running ACS 5.2

Hi Vikram,
Which device is this ?
Can you share aaa configs of the device,
Is it happening to all devices .
Can we get debug aaa accounting from that device?
Thanks
Waris Hussain

Similar Messages

MAC Address in Radius Accounting Start Record

what's the MAC Address AVP that appears in accounting start record used for ?

Vikram,
Are you performing webauth or is this for an auth-proxy session? If a user authenticates via dot1x then the calling station id is the mac address, if the user is peforming webauth or if this for an auth-proxy session then the ip address of the client is sent.
Thanks,
Tarik

Radius Accounting and AP1100

Hello,
I have lots of AP1121G, that authenticating users on a radius server (Radiator).
I need to make accounting of octets in and out per user, but i have some problems with this.
In general, the accounting is working fine, but the APs dont send some attributes that i need (Acct-Input-Octets, Acct-Output-Octets), included in Accounting-Request (stop) Packets (http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_guide_chapter09186a00802091b1.html).
Someone can help me to find the problem?
I have a theory, but i don't know if is right: This attributes can't be sent because the IP Address is assigned to clients by a third DHCP Server (router cisco) and not by the Radius server. Could be by this?
How can i solve the problem?
The Radius part of configuration of my APs:
aaa new-model
aaa authentication login default local
aaa authentication login eap_methods group radius
aaa authentication login mac_methods local
aaa authorization exec default local
aaa authorization network default group radius
aaa accounting send stop-record authentication failure
aaa accounting update periodic 5
aaa accounting auth-proxy default start-stop group radius
aaa accounting exec default start-stop group radius
aaa accounting network default start-stop group radius
aaa accounting connection default start-stop group radius
aaa accounting system default start-stop group radius
aaa accounting resource default start-stop group radius
aaa nas port extended
aaa session-id unique
ssid MySSID
vlan 150
authentication open eap eap_methods
accounting default
ip radius source-interface BVI1
radius-server host 172.1.0.1 auth-port 1812 acct-port 1813 key 7 xxxxxxxxxxxxxxxxxxxxx
radius-server authorization permit missing Service-Type
radius-server vsa send accounting
radius-server vsa send authentication
Thanks in advance!
Nuno.

Willw69,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at
http://support.novell.com in both the "free product support" and "paid product support"
drop down boxes.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://support.novell.com/forums)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Error in SWWERRE "No personnel control record exists for accounting area 99"

Dear Experts,
The standard job for restarting of workflows with temporary errors , SWWERRE, has suddenly started failing.
The message obtained in Job Log is "No personnel control record exists for accounting area 99".
The Payroll Control Record for Payroll Area 99 does not exist as it is a non-payroll relevant area.
There has been no change in HCM configuration or Job characteristics.
What could have triggered these sudden failures.
Please suggest.
Regards,
Shilpa A.

Hi Shilpa
This is not an issue with the report RSWWERRE (Job SWWERRE).
It must be trying to pickup work items which are in Error State (temporary) - that item may have this data issue - Run Report RSWWERRE from SE38 and debug, you will come to know.
Check if:
1) The error WI belongs to TRIP (BUS2089)
2) Put a break point in FORM SUB_ABRECHNUNG(SAPLHRTR) and run report RSWWERRE (if the work item is still in TEMPORARY ERROR SATE and has not converted to permanent error) ..... debugging should stop there if the above point is correct
3) This will give you the Trip and Employee number - check if the data is consistent (BAPI_TRIP_CHECK_STATUS)
4) This usually happens when you use &TRIP.AVSEXORADAUTHORITYLEVEL& in the binding (of the error step)
if this is true, correct the data and it should work else delete those work items and restart the job (remember to correct the data to avoid future issues).
If not,
still the fist point holds true, "It must be trying to pickup items which are in Error State - that item may have the issue - Run Report RSWWERRE from SE38 and debug, you will come to know." Some errors are deep rooted and cannot be caught by the job
Also check if note 1452535 is relevant for your release.
Regards,
Modak
Message was edited by: Modak Gupta
............Also check thread: ..
http://scn.sap.com/thread/2021322

ACSv5.1, lack of clarity on radius accounting logs

Hi,
We are using an ACS 5.1 for remote VPN customers for radius authentication and accounting purposes.
When I check the radius accounting logs, there are certain entries that do not make sense to me.
For instance, there are certain Accounting session ids (refer 'Acct_Session_Id') with only a STOP record. But I do not see a START record corresponding to the session id. I am able to see many such entries.
Can anybody throw some light on this information??
Note - The customer environment consists of remote users who try to access the central NAS using IPSec. Requests that come to the NAS get directed to the ACS for AAA purposes.
Also provided are some sample ACS logs [refer highlighted section]
Regards,
Abishek

Hi welshydragon,
The Openreach Superfast Fibre Broadband rollout is still in it's early stages and the plans are always being added too.
So your exchange may be added to the rollout plans later in the future.
The build of the fibre broadband infrastructure isn't always easy and can be very complex, so needs a lot of planning to start with and can take some time. Go to http://superfast-openreach.co.uk/the-big-build/ for information on the build.
You can register your interest for Fibre Broadband such as BT Infinity by going to http://www.superfast-openreach.co.uk/expression-gen.aspx
Unfortunately BT Retail (a communication provider/ISP who operates this forum) does not have much say as to when and if you will be able to get FTTC or FTTP/H based broadband such as BT Infinity.
I also take it from your username that you live in Wales. If this is correct then see below.
If you live in Wales, then the Welsh Government has recently started to plan the development of Superfast Fibre broadband in Wales.
You may want to have a look at The Welsh Government Next Generation Broadband Wales Scheme-(Click Here To View) and Here
Also the http://superfast-cymru.com website has only just become online and will give information about the Openreach Superfast Fibre broadband rollout in Wales.
**The Fibre-Optic Broadband Rollout is being managed and done by Openreach for all communication providers/ISPs.
BT Retail (a communication provider/ISP) has nothing to do with the rollout of fibre broadband.**
Hope that helps,
Cheers
jac_95 | BT.com Help Site | BT Service Status
Someone Solved Your Question?
Please let other members know by clicking on ’Mark as Accepted Solution’
Try a Search
See if someone in the community had the same problem and how they got it resolved.

WLC with Multiple RADIUS Accounting Servers

If a WLC has multiple accounting servers defined for a WLAN, will accounting packets be sent to all accounting servers ?
The operation of authentication servers is that the WLC will only send authentication requests to a single RADIUS server. If that RADIUS server becomes unavailable, then the WLC will start to send authentication requests to the next available RADIUS server in the list configured for the WLAN.
Is it the same mode of operation for accounting servers? Or, does the WLC send accounting records to all accounting servers that are defined against a WLAN?
Thanks
Nigel.

So the WLC would use the priority list for the Radius servers for accouting.
I have a setup that I need to send accounting to two different servers for different reasons. can this be done on the WLC?
if not, does anyone know a good forking server for radius accounting?

Business Content or Information for GR/IR Account Report

Hi All,
I have an R3 report called GR/IR Account Report by PO Mismatch.
Is there any business content available for this in BI.
The below tables are using in the report.
         bsis,                         " Accounting docs by account
         bsas,                         " Cleared accounting docs by acc
         bseg,                         " Accounting doc line item
         ekko,                         " Purchase Order Header,
         ekpo,
         mkpf,                         " Material Document
         lfa1,                         " Vendor details
         ekbe,                         " PO History
         ekkn,                         " PO Acct.Assgnment
         usr21,
         addr3_val,
         ad3_flags,
         stxh.
Could you please provide me your inputs on this
Regards
Srini

The new additional fields need to be populated are
          ZZAUFNR         Order Number                                  *
          ZZBEDAT         Purchase Order Date                           *
          ZZCRE_FI         FI Doc Created By                             *
          ZZCRE_PO         PO Doc Created By                             *
          ZZEBELN         Purchasing Document Number                    *
          ZZEBELP         Item Number of Purchasing Document            *
          ZZKOSTL         Cost Center                                   *
          ZZMWSKZ         Tax on sales/purchases code                   *
          ZZPROJK      WBS element                                   *
          ZZTXZ01         Short text                                    *
          ZZUSNAM         User name                                     *
          ZZXBLNR         Reference document number                     *
          ZZHWSTE      Tax Amount in Local Currency                 *
          ZZSGTXT      Item Text                                    *
          ZZHKONT      Finance G/L Account                          *
when '0FI_AP_4'.
Declare the local data fields to store data temporarily
    data : l_dtfiap_3 like DTFIAP_3,
           mwskz like bsik-mwskz,
           l_ernam like   bapibname-bapibname,
           l_address like bapiaddr3,
           l_bseg like bseg,
           l_bedat like ekko-bedat,
           l_ps_psp_pnr like prps-pspnr.
    data : gt_return type bapiret2 occurs 0 with header line.
    loop at c_t_data into l_dtfiap_3.
      l_tabix = sy-tabix.
*Select the tax Code for the particular record from BSAK TABLE
      select single mwskz sgtxt into (l_dtfiap_3-zzmwskz,
                                      l_dtfiap_3-zzsgtxt)
            from bsak
            where bukrs = l_dtfiap_3-bukrs
              and buzei = l_dtfiap_3-buzei
              and belnr = l_dtfiap_3-belnr
              and lifnr = l_dtfiap_3-lifnr
              and gjahr = l_dtfiap_3-gjahr
              and zuonr = l_dtfiap_3-zuonr
              and augbl = l_dtfiap_3-augbl
            and augdt = l_dtfiap_3-augdt
            and bldat = l_dtfiap_3-bldat
            and blart = l_dtfiap_3-blart
            and bschl = l_dtfiap_3-bschl
            and budat = l_dtfiap_3-budat.
      if sy-subrc = 0.
        modify c_t_data from l_dtfiap_3 index l_tabix.
      else.
*If corresponding Document Number is not present in BSAK check BSIK
*TABLE
        select single mwskz sgtxt into (l_dtfiap_3-zzmwskz,
                                        l_dtfiap_3-zzsgtxt)
                from bsik
                where bukrs = l_dtfiap_3-bukrs
                  and buzei = l_dtfiap_3-buzei
                  and belnr = l_dtfiap_3-belnr
                  and lifnr = l_dtfiap_3-lifnr
                  and gjahr = l_dtfiap_3-gjahr
                  and zuonr = l_dtfiap_3-zuonr
                  and augbl = l_dtfiap_3-augbl
                and augdt = l_dtfiap_3-augdt
                and bldat = l_dtfiap_3-bldat
                and blart = l_dtfiap_3-blart
                and bschl = l_dtfiap_3-bschl
                and budat = l_dtfiap_3-budat.
        if sy-subrc = 0.
          modify c_t_data from l_dtfiap_3 index l_tabix.
        endif.
      endif.
      select single hwste into l_dtfiap_3-zzhwste
          from bset
          where bukrs eq l_dtfiap_3-bukrs
            and belnr eq l_dtfiap_3-belnr
            and gjahr eq l_dtfiap_3-gjahr
            and buzei eq l_dtfiap_3-buzei.
Select Created By and invoice Reference Number from BKPF table
      select single usnam xblnr from bkpf
          into (l_dtfiap_3-zzusnam,l_dtfiap_3-zzxblnr)
            where bukrs = l_dtfiap_3-bukrs
              and belnr = l_dtfiap_3-belnr
              and gjahr = l_dtfiap_3-gjahr.
      if sy-subrc = 0.
        modify c_t_data from l_dtfiap_3 index l_tabix.
      endif.
      move l_dtfiap_3-zzusnam to l_ernam.
      refresh : gt_return.
Get the Fi doc Created By doing the function Module call
      call function 'BAPI_USER_GET_DETAIL'
        EXPORTING
          username = l_ernam
        IMPORTING
          address = l_address
        TABLES
          return   = gt_return.
      move l_address-fullname to l_dtfiap_3-zzcre_fi.
      if l_dtfiap_3-zzcre_fi is initial.
        move l_ernam to l_dtfiap_3-zzcre_fi.
      endif.
      if not l_dtfiap_3-zzcre_fi is initial.
        modify c_t_data from l_dtfiap_3 index l_tabix.
      endif.
      if l_dtfiap_3-blart eq 'RE'.
.....Get New Fields from PO linked to FI Document.....................
Select PO Number from PO Line item from BSEG TABLE
        select buzei buzid ebeln ebelp
          into corresponding fields of l_bseg
          from bseg
         where bukrs eq l_dtfiap_3-bukrs
           and belnr eq l_dtfiap_3-belnr
           and gjahr eq l_dtfiap_3-gjahr.
          if l_bseg-buzei eq l_dtfiap_3-buzei.
.....Already read this line, therefore ignore it......................
            continue.
          endif.
          if l_bseg-buzid eq 'T'.
.....Don't read automatically created lines - Tax Line................
            continue.
          endif.
          if not ( l_bseg-ebeln is initial ).
            move l_bseg-ebeln to l_dtfiap_3-zzebeln.   " PO Number
          endif.
          if not ( l_bseg-ebelp is initial ).
            move l_bseg-ebelp to l_dtfiap_3-zzebelp.   " PO Line Item No
          endif.
          if not l_dtfiap_3-zzebelp is initial.
            modify c_t_data from l_dtfiap_3 index l_tabix.
          endif.
        endselect.
.....Got PO Number from FI Document, Now get PO Details...............
.....Get Short Text...................................................
GET PO Line Item text
        select single txz01 into l_dtfiap_3-zztxz01
          from ekpo
           where ebeln eq l_dtfiap_3-zzebeln
             and ebelp eq l_dtfiap_3-zzebelp.
        if sy-subrc = 0.
          modify c_t_data from l_dtfiap_3 index l_tabix.
        endif.
.....Get Account Assignment...........................................
        select ps_psp_pnr aufnr kostl sakto
          into (l_ps_psp_pnr,l_dtfiap_3-zzaufnr,
                  l_dtfiap_3-zzkostl,l_dtfiap_3-zzhkont)
              from ekkn
               where ebeln eq l_dtfiap_3-zzebeln
                 and ebelp eq l_dtfiap_3-zzebelp.
          if sy-subrc = 0.
            modify c_t_data from l_dtfiap_3 index l_tabix.
          endif.
          select single posid into l_dtfiap_3-zzprojk
               from prps
                 where pspnr = l_ps_psp_pnr.
          if sy-subrc = 0.
            modify c_t_data from l_dtfiap_3 index l_tabix.
          endif.
        endselect.
.....Get Name of Person who created PO................................
        clear : l_ernam,l_bedat.
        select ernam bedat into (l_ernam, l_bedat)
            up to 1 rows
            from ekko
             where ebeln eq l_dtfiap_3-zzebeln.
        endselect.
        move l_bedat to l_dtfiap_3-zzbedat.
        if not l_dtfiap_3-zzbedat is initial.
          modify c_t_data from l_dtfiap_3 index l_tabix.
        endif.
        refresh : gt_return.
        call function 'BAPI_USER_GET_DETAIL'
          EXPORTING
            username = l_ernam
          IMPORTING
            address = l_address
          TABLES
            return   = gt_return.
        move l_address-fullname to l_dtfiap_3-zzcre_po.
        if l_dtfiap_3-zzcre_po is initial.
          move l_ernam to l_dtfiap_3-zzcre_po.
        endif.
        if not l_dtfiap_3-zzcre_po is initial.
          modify c_t_data from l_dtfiap_3 index l_tabix.
        endif.
      else.
.....Get new Fields from FI Document..................................
        select buzei buzid ebeln ebelp projk aufnr kostl hkont
          into corresponding fields of l_bseg
          from bseg
         where bukrs eq l_dtfiap_3-bukrs
           and belnr eq l_dtfiap_3-belnr
           and gjahr eq l_dtfiap_3-gjahr.
          if l_bseg-buzei eq l_dtfiap_3-buzei.
.....Already read this line, therefore ignore it......................
            continue.
          endif.
          if l_bseg-buzid eq 'T'.
.....Don't read automatically created lines - Tax Line................
            continue.
          endif.
          if not ( l_bseg-ebeln is initial ).
            move l_bseg-ebeln to l_dtfiap_3-zzebeln. " PO Number
          endif.
          if not ( l_bseg-ebelp is initial ).
            move l_bseg-ebelp to l_dtfiap_3-zzebelp. " PO Line Item
          endif.
          move l_bseg-aufnr to l_dtfiap_3-zzaufnr.   " Order Number
          move l_bseg-kostl to l_dtfiap_3-zzkostl.   " Cost Centre
          move l_bseg-hkont to l_dtfiap_3-zzhkont.   " GL Account
          select single posid into l_dtfiap_3-zzprojk
              from prps
                where pspnr = l_bseg-projk.
          if not l_dtfiap_3-zzprojk is initial
            or not l_dtfiap_3-zzaufnr is initial
            or not l_dtfiap_3-zzkostl is initial
            or not l_dtfiap_3-zzhkont is initial.
            modify c_t_data from l_dtfiap_3 index l_tabix.
          endif.
        endselect.
.....Get PO Short Text................................................
        select single txz01 into l_dtfiap_3-zztxz01
          from ekpo
           where ebeln eq l_dtfiap_3-zzebeln
           and ebelp eq l_dtfiap_3-zzebelp.
        if sy-subrc = 0.
          modify c_t_data from l_dtfiap_3 index l_tabix.
        endif.
.....Get Name of Person who created PO................................
        clear : l_ernam,l_bedat.
        select ernam bedat into (l_ernam, l_bedat)
               up to 1 rows
               from ekko
               where ebeln eq l_dtfiap_3-zzebeln.
        endselect.
        move l_bedat to l_dtfiap_3-zzbedat.
        if not l_dtfiap_3-zzbedat is initial.
          modify c_t_data from l_dtfiap_3 index l_tabix.
        endif.
        refresh : gt_return.
Get PO Doc Created By
        call function 'BAPI_USER_GET_DETAIL'
          EXPORTING
            username = l_ernam
          IMPORTING
            address = l_address
          TABLES
            return   = gt_return.
        move l_address-fullname to l_dtfiap_3-zzcre_po.
        if l_dtfiap_3-zzcre_po is initial.
          move l_ernam to l_dtfiap_3-zzcre_po.
        endif.
        if not l_dtfiap_3-zzcre_po is initial.
          modify c_t_data from l_dtfiap_3 index l_tabix.
        endif.
      endif.
    endloop.
Edited by: Srinivas Gogineni on Apr 19, 2009 11:10 AM

ISE 1.2 - Error 12929 NAS sends RADIUS accounting update messages too frequently

We are currently running Cisco ISE 1.2, and every day under the "Misconfigured Network Devices" section on the main ISE Page, I have a huge list of different devices that are all being flagged with the following error message:
"12929 NAS sends RADIUS accounting update messages too frequently." " NAS sends RADIUS accounting update messages too frequently
Verify NAS configuration. Verify known NAS issues."
The list of devices seems to all be Cisco switches; albeit different models, IOS versions, ect.
i have searched on this issue, and the closest thing to a fix I can find is that it would be fixed in a WLC update, but that was 9 months ago. I would like to know what causes this issue, and what needs to be altered in ISE, or on the switches to resolve this.
Thank You.

CSCuh20269 WLC sends acc updates too frequently, indicates user roams to itself is the defect specifically on the WLC that is fixed in one of the 7.6 releases.
Along with the config Jatin mentioned, you may want to try pulling an Accounting report from ISE periodically and analyze the traffic/isolate the endpoints/supplicants that may be causing a lot of activity (For ex frequent IP changes ) which results in frequent accounting updates.
Regards,
Gurudatt
Escalation engineer, SAMPG | CCIE#28227
Cisco systems

Unable to start recording - occasional issue

We're having an intermittent issue that so far we have been unable to narrow down the exact cause so that we can fix the issue. Once in a while, when someone tries to start recording a call that an avgent is on, they will get a message stating "Unable to start recording for agent <agent's name>.". Initially we found that restarting the computer that the agent is sitting at would resolve the issue and they could be recorded again. That was not a viable long term solution however, and further troubleshooting has found that the computer itself doesn't need to be restarted to fix the issue. We found that just restarting the Cisco Agent Desktop software fixes the issue and allows that agent to be recorded again.
We have checked settings in CM for the agents and phones that this has happened to previously but everything has been correct there. The only common connection that we have found so far has been that the issue seems to happen after the agent has transferred a call or received a transferred call.
This isn't a widespread issue and only happens once in a while(maybe once or twice a week), and so far it isn't always the same person(agent or the person doing the recording) or the same computer. We're trying to gather more data, but due to the intermittentcy of this issue there isn't much at this point to go on.
Anyone have any suggestions/ideas?

Hi,
Sorry for the delayed reply. Reporting of this issue to us from the users has been sporadic. Our UCCX version is 8.
The issue isn't happening to any one agent but the ICD extension isn't shared with any other numbers that we can see, and checking the Route Plan Report doesn't show any lines that are shared with other numbers.
Is there possibly a timeout setting of some kind that could be affecting recording when a call is transferred?

(Administration - Marketing - Import), you can set a parameter value "Import mode" for what to do in case of duplication as "update existing records", "Import new records". The final report of this import is presented as a text file that can be viewed in

Administration - Marketing -> Import, you can set a parameter value "Import mode" for what to do in case of duplication as "update existing records", "Import new records". The final report of this import is presented as a text file that can be viewed in Business Administration - Marketing -> Import -> Exceptions. Whatever the exception, including duplication import occurs during import and recorded in a text file. What are the fields that determine the duplicity? How I can I can change those?

You will be returned anything that is in the option's value parameter. What is displayed in the dropdown and what is put in the value attribute do NOT need to be the same, so maybe you should start there.

Adding a New Contact Record link in a report

Dear Gurus,
I've followed instructions on how to create a New record link in a report using instructions from the Oracle CRM On Demand Reporting book but needed additional help in terms of how to auto populate the Account Name onto the New Contact Edit screen. I've created a custom Contact report that is setup as a web applet to replace the OOB Contact section that is showing on the Account Detail screen.
On this report, I've created a hyperlink that opens a New record edit screen for a Contact record. I need to pass in the Account Name since this is a required field on the Contact Detail screen and needed help with the URL that I've entered as a custom text format in the column formula. From the M. Lairson's Reporting book, I've entered:
@[html]*a href="/OnDemand/user/ContactDetail?OMTGT=ContactDetailForm &ContactDetailForm.Id="@target="_
top">"Contact Details"*/a*
(html not displayed correctly - I've to substitute < and > with *)
This worked great but I need to pass in the Account Name. Can you help with a URL that will do what I needed? Thanks.
Edited by: TTone on Jul 26, 2010 12:16 AM
Edited by: TTone on Jul 26, 2010 12:27 AM

Hi,
Copy the URL from the contact create link and pass the values like Account Name etc by adding it to the URL, use & to separate the values.
hope it helps,
Mayank

Ageing 7 Buckets - By Account Report - Unapplied Receipts Register

Hi Guys,
I am not a disco professional, just wanted to know if i want the following reports (Ageing 7 Buckets - By Account Report - Unapplied Receipts Register) to run from disco how do i achive this ?
Thanks
Bal

Hi Bal
Does the report exist? If so you need to share it with a user that you have access to then log in as that user and run it.
If the report does not exist you will need to create it.
If you're asking whether Discoverer can create an aging report with buckets the answer is yes and the trick is to master the CASE statement. This might help:
CASE WHEN days_late < 8 THEN 'Within 1 week'
WHEN days_late < 15 THEN 'More than 1 but less than 2 weeks'
WHEN days_late < 22 THEN 'More than 2 but less than 3 weeks'
.... and do on until .....
WHEN days_late < 91 THEN 'some suitable bucket'
ELSE 'More than 90 days'
END
As you create the CASE statement the set of values remaining is decreased by that statement just processed. So for example if you start out by looking for anything less than 8 then once those have been determined there will be no more values in the set. Thus next we look for anything less than 15, and so on.
If you want to work the other way, from the top down you need to use the greater than symbol like this:
CASE WHEN days_late > 89 THEN 'More than 90 days'
WHEN days_late > 59 THEN 'More than 60 days'
.... and do on until .....
WHEN days_late > 7 THEN 'More than 7 days'
ELSE 'Within 1 week'
END
Best wishes
Michael

GL account report

Hi,
I have to build a debit credit wise GL account report. Can anyone help me to determine what all tables would be associated.
Regards,
G. Shankar

Hi Shankar,
General ledger accounts
SKA1 G/L accounts master (chart of accounts)
SKAS G/L account master (chart of accounts: key word list)
SKAT G/L account master record (chart of accounts: description)
SKB1 G/L account master (company code)
SKM1 Sample G/L accounts
SKMT Sample account names
BKPF Accounting document header
BSEG Accounting document segment
BSET Tax data document segment
BSEC One-time account data document segment
BSAD Accounting: Secondary index for customers (cleared items)
BSID Accounting: Secondary index for customers
BSIW Index table for customer bills of exchange used
BSIX Index table for customer bills of exchange used
BSAK Accounting: Secondary index for vendors (cleared items)
BSIK Accounting: Secondary index for vendors
BSIP Index for vendor validation of double documents
BSAS Accounting: Secondary index for G/L accounts (cleared items)
Thanks,
Nelson

Radius accounting for QoS pppoe policy-map

Hi folks
I have a radius pushing an AVPAIR ip:sub-qos-policy-out to a virtual template for clients connected to a BRAS through PPPOE.
The AVPAIR is correctly applied to each and every pppoe session but the following link http://www.cisco.com/c/en/us/td/docs/ios/12_2sb/feature/guide/sbbbrs1c.html is indicating that I should be able to push back to the RADIUS some traffic info per class-map/policy map. This would allow some Quota stuff and getting some info about traffic used per customer
From what I have been able to configure, i'm not getting any of this stats back to the RADIUS
the debug radius accounting :
*Mar 12 05:29:00.419: RADIUS/ENCODE(0000000E):Orig. component type = PPPoE
*Mar 12 05:29:00.419: RADIUS/ENCODE(0000000E): Acct-session-id pre-pended with Nas Port = 0/0/3/0
*Mar 12 05:29:00.419: RADIUS(0000000E): Config NAS IP: 0.0.0.0
*Mar 12 05:29:00.419: RADIUS(0000000E): sending
*Mar 12 05:29:00.419: RADIUS/ENCODE: Best Local IP-Address 192.168.38.133 for Radius-Server 192.168.38.131
*Mar 12 05:29:00.419: RADIUS(0000000E): Send Accounting-Request to 192.168.38.131:1813 id 1646/55, len 299
*Mar 12 05:29:00.419: RADIUS: authenticator ED 94 CF EE BD 73 30 7E - 93 07 A4 C3 50 A6 03 DE
*Mar 12 05:29:00.419: RADIUS: Acct-Session-Id [44] 18 "0/0/3/0_00000005"
*Mar 12 05:29:00.419: RADIUS: Framed-Protocol [7] 6 PPP [1]
*Mar 12 05:29:00.419: RADIUS: Framed-IP-Address [8] 6 10.10.10.2
*Mar 12 05:29:00.419: RADIUS: User-Name [1] 9 "olivier"
*Mar 12 05:29:00.419: RADIUS: Vendor, Cisco [26] 35
*Mar 12 05:29:00.419: RADIUS: Cisco AVpair [1] 29 "connect-progress=LAN Ses Up"
*Mar 12 05:29:00.419: RADIUS: Vendor, Cisco [26] 29
*Mar 12 05:29:00.419: RADIUS: Cisco AVpair [1] 23 "nas-tx-speed=10000000"
*Mar 12 05:29:00.419: RADIUS: Vendor, Cisco [26] 29
*Mar 12 05:29:00.419: RADIUS: Cisco AVpair [1] 23 "nas-rx-speed=10000000"
*Mar 12 05:29:00.419: RADIUS: Acct-Session-Time [46] 6 2582
*Mar 12 05:29:00.419: RADIUS: Acct-Input-Octets [42] 6 7232
*Mar 12 05:29:00.419: RADIUS: Acct-Output-Octets [43] 6 7232
*Mar 12 05:29:00.419: RADIUS: Acct-Input-Packets [47] 6 517
*Mar 12 05:29:00.419: RADIUS: Acct-Output-Packets [48] 6 517
*Mar 12 05:29:00.419: RADIUS: Acct-Authentic [45] 6 RADIUS [1]
*Mar 12 05:29:00.419: RADIUS: Acct-Status-Type [40] 6 Watchdog [3]
*Mar 12 05:29:00.419: RADIUS: NAS-Port-Type [61] 6 Virtual [5]
*Mar 12 05:29:00.419: RADIUS: Vendor, Cisco [26] 15
*Mar 12 05:29:00.419: RADIUS: cisco-nas-port [2] 9 "0/0/3/0"
*Mar 12 05:29:00.419: RADIUS: NAS-Port [5] 6 50331648
*Mar 12 05:29:00.419: RADIUS: NAS-Port-Id [87] 9 "0/0/3/0"
*Mar 12 05:29:00.419: RADIUS: Vendor, Cisco [26] 41
*Mar 12 05:29:00.419: RADIUS: Cisco AVpair [1] 35 "client-mac-address=aabb.cc00.6430"
*Mar 12 05:29:00.419: RADIUS: Service-Type [6] 6 Framed [2]
*Mar 12 05:29:00.419: RADIUS: NAS-IP-Address [4] 6 192.168.38.133
*Mar 12 05:29:00.419: RADIUS: Ascend-Session-Svr-K[151] 10
*Mar 12 05:29:00.419: RADIUS: 37 39 38 32 45 41 38 30 [ 7982EA80]
*Mar 12 05:29:00.419: RADIUS: Acct-Delay-Time [41] 6 0
*Mar 12 05:29:00.419: RADIUS(0000000E): Started 5 sec timeout
*Mar 12 05:29:00.419: RADIUS: Received from id 1646/55 192.168.38.131:1813, Accounting-response, len 20
*Mar 12 05:29:00.419: RADIUS: authenticator A7 0E 79 40 C5 B5 CF DC - 09 46 27 48 52 BE 01 7D
What I get in the freeradius log :
Tue Mar 11 22:30:04 2014
Acct-Session-Id = "0/0/3/0_00000005"
Framed-Protocol = PPP
Framed-IP-Address = 10.10.10.2
User-Name = "olivier"
Cisco-AVPair = "connect-progress=LAN Ses Up"
Cisco-AVPair = "nas-tx-speed=10000000"
Cisco-AVPair = "nas-rx-speed=10000000"
Acct-Session-Time = 2646
Acct-Input-Octets = 7428
Acct-Output-Octets = 7428
Acct-Input-Packets = 531
Acct-Output-Packets = 531
Acct-Authentic = RADIUS
Acct-Status-Type = Interim-Update
NAS-Port-Type = Virtual
Cisco-NAS-Port = "0/0/3/0"
NAS-Port = 50331648
NAS-Port-Id = "0/0/3/0"
Cisco-AVPair = "client-mac-address=aabb.cc00.6430"
Service-Type = Framed-User
NAS-IP-Address = 192.168.38.133
X-Ascend-Session-Svr-Key = "7982EA80"
Acct-Delay-Time = 0
Acct-Unique-Session-Id = "523eac6ae326a778"
Timestamp = 1394602204
Request-Authenticator = Verified
user config in the users file on the freeradius server :
olivier Cleartext-Password := "olivier"
Service-Type = Framed-User,
Cisco-AVPair += "ip:addr-pool=pppoepool",
Cisco-AVpair += "ip:sub-qos-policy-out=TEST"
I see that the policy map name is pulled correctly from the radius server and applied to the session :
#sh policy-map session uid 14
SSS session identifier 14 -
Service-policy output: TEST
Class-map: TEST (match-all)
0 packets, 0 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
police:
cir 8000 bps, bc 1500 bytes
conformed 0 packets, 0 bytes; actions:
transmit
exceeded 0 packets, 0 bytes; actions:
drop
conformed 0 bps, exceed 0 bps
Class-map: class-default (match-any)
0 packets, 0 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
Any input very welcome

Cisco sever is working fine. When you do use non-standard or non-RFC requests from your NAS to the AAA server for instance, you have to configure your server accordingly to instruct it how to handle this kind of requests.
This is typically done with something called "dictionary", which should be included in your radius server. The server typically decodes all RFC 2865 VSAs (or should), but when a new NAS model is introduced into the network, you can modify it to add any VSAs not appearing in the dictionary, which is your case.
As an example, imagine you want to change the attribute cisco-vsa-port-string to tagged-string, your dictionary will look somethign similar than:
And finally you will have to modify with a text editor, or XML editor and change type="tagged-string" supposing your device comply with RFC 2868. Probably
the AAA server will have to restarted for taking this
changes into account.
Also,since this does apply to all devices for this vendor, you've got other option more, which is define your own dictionary for a specific vendor, or even if you wish for a specific NAS or group or NASes.
In NavisRadius you could associate a dictionary to a
device adding a client-class:
# Client-IP Client-Secret Client-Class
10.0.0.1 secret taos-old
And then specifying the dictionary later in client_properties for this device:
# This file contains information about client classes # and is used to set per-client specific information.
# TAOS Devices in OLD mode with RFC conflicts
taos-old
Client-Dictionary=max_dictionary
# Other devices now, etc.
Hope it helps

No RADIUS accounting with SF 302?

Hello all,
I have configured my SF 302-08P switch to perform 802.1X & MAC authentication. This works fine in both cases but I cannot get the switch to send accounting requests to my RADIUS server. Even when the server sends back an Acct-Interim-Interval attribute in the Access-Accept message, the switch doesn't generate accounting requests. Is it a known restriction or am I missing something?
I'm a little bit surprised since the datasheet claims that both RADIUS authentication and accounting are supported for 802.1X. The switch version is 1.0.0.27.
Regards,
Simon

Hi Simon,
Yep according to the RFC2866 it states"
When a client is configured to use RADIUS Accounting, at the start of
   service delivery it will generate an Accounting Start packet
   describing the type of service being delivered and the user it is
   being delivered to, and will send that to the RADIUS Accounting
   server, which will send back an acknowledgement that the packet has
   been received. At the end of service delivery the client will
   generate an Accounting Stop packet describing the type of service
   that was delivered and optionally statistics such as elapsed time,
   input and output octets, or input and output packets. It will send
   that to the RADIUS Accounting server, which will send back an
   acknowledgement that the packet has been received."
The delay in my response was trying to simulate the scenario, but I don't have all the pieces here.
Have a Chat to the boys/gals at SBSC to get some clarification.
http://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html
regards Dave

No Start Records in Radius Accounting reports

Similar Messages

Maybe you are looking for