This section specifies the attributes for RADIUS accounting on dynamic data service SAPs. The attributes for RADIUS accounting of the associated control channel is identical as the ESM accounting case (see ESM accounting.
| Attribute ID | Attribute name | Description |
|---|---|---|
|
1 |
User-Name |
Dynamic data services associated with an ESM control channel:
Dynamic data services associated with a dynamic service data trigger:
|
|
4 |
NAS-IP-Address |
The identifying IP Address of the NAS requesting the Authentication or Accounting. Included when the RADIUS server is reachable using IPv4. The address is determined by the routing instance through which the RADIUS server can be reached: ‟Management” — The active IPv4 address in the Boot Options File (bof address ipv4-address) ‟Base” or ‟VPRN” — The IPv4 address of the system interface (configure router interface system address address). The address can be overwritten with the configured source-address (configure aaa radius-server-policy policy-name servers source-address ip-address) |
|
25 |
Class |
(Dynamic Data Services associated with an ESM control channel only) The Class attributes from the Dynamic Data Service Control Channel associated with this Dynamic Data Service SAP accounting session |
|
32 |
NAS-Identifier |
A string (configure system name system-name) identifying the NAS originating the Accounting requests. |
|
40 |
Acct-Status-Type |
Indicates whether this Accounting-Request marks the beginning of the user service (Start) or the end (Stop) or reports interim updates. |
|
41 |
Acct-Delay-Time |
Indicates how many seconds the client has been trying to send this accounting record for. This attribute is included with value 0 in all initial accounting messages. |
|
44 |
Acct-Session-Id |
Unique generated hexadecimal number that represents the accounting session for this Dynamic Data Service SAP. |
|
46 |
Acct-Session-Time |
The Acct-Session-Time time is started when the corresponding dynamic data service sap is created. The Acct-Session-Time is stopped when the corresponding dynamic data service SAP is deleted. When the SAP is orphaned (not deleted in the teardown function call), the session time stops after the teardown script is executed. If an accounting stop is sent as a result of a failure scenario, the Acct-Session-Time is zero. |
|
49 |
Acct-Terminate-Cause |
Indicates how the accounting session was terminated. |
|
50 |
Acct-Multi-Session-Id |
Dynamic data services associated with and ESM control channel:
Dynamic data services associated with a dynamic service data trigger:
|
|
55 |
Event-Timestamp |
Record the time that this event occurred on the NAS, in seconds since January 1, 1970 00:00 UTC |
|
87 |
NAS-Port-Id |
The Dynamic Data Service SAP where this accounting session is started for |
|
95 |
NAS-IPv6-Address |
The identifying IP Address of the NAS requesting the Authentication or Accounting. Included when the RADIUS server is reachable using IPv6. The address is determined by the routing instance through which the RADIUS server can be reached: ‟Management” — The active IPv6 address in the Boot Options File (bof address ipv6-address) ‟Base” or ‟VPRN”— The IPv6 address of the system interface (configure router interface system ipv6 address ipv6-address). The address can be overwritten with the configured ipv6-source-address (configure aaa radius-server-policy policy-name servers ipv6-source-address ipv6-address) |
|
26.3561.1 |
Agent-Circuit-Id |
(Dynamic Data Services associated with an ESM control channel only) The Agent-Circuit-Id attribute from the Dynamic Data Service Control Channel associated with this Dynamic Data Service SAP accounting session |
|
26.3561.2 |
Agent-Remote-Id |
(Dynamic Data Services associated with an ESM control channel only) The Agent-Remote-Id attribute from the Dynamic Data Service Control Channel associated with this Dynamic Data Service SAP accounting session |
|
26.6527.165 |
Alc-Dyn-Serv-Script-Params |
Parameters as input to the Dynamic Data Service Python script. The parameters can cross an attribute boundary. The concatenation of all Alc-Dyn-Serv-Script-Params attributes with the same tag in a single message must be formatted as function-key dictionary where the function-key specifies which Python functions are called and dictionary contains the actual parameters in a Python dictionary structure format. In dynamic service RADIUS accounting messages, the attribute is sent untagged and contains the last received Alc-Dyn-Serv-Script-Params value in an Access-Accept or CoA message for this dynamic service. Multiple attributes may be present if the total length does not fit a single attribute. |
| Attribute ID | Attribute name | Type | Limits | SR OS format |
|---|---|---|---|---|
|
1 |
User-Name |
string |
253 chars |
For dynamic data services associated with an ESM control channel, the format depends on authentication method and configuration. For dynamic data services associated with a dynamic service data trigger, the format is fixed to the dynamic services sap-id. For example: User-Name user1@domain1.com |
|
4 |
NAS-IP-Address |
ipaddr |
4 bytes |
# ip-address For example: NAS-IP-Address ‟192.0.2.1” |
|
25 |
Class |
octets |
Up to 6 attributes. Max. value length for each attribute is 253 chars |
For example: Class = ‟This is a Class attribute” |
|
32 |
NAS-Identifier |
string |
64 chars |
For example: NAS-Identifier = router-1 |
|
40 |
Acct-Status-Type |
integer |
4 |
1=Start, 2=Stop, 3=Interim Update, 7=Accounting-On, 8=Accounting-Off, 9=Tunnel-Start, 10=Tunnel-Stop, 11=Tunnel-Reject, 12=Tunnel-Link-Start, 13=Tunnel-Link-Stop, 14=Tunnel-Link-Reject, 15=Failed |
|
41 |
Acct-Delay-Time |
integer |
4294967295 seconds |
For example: # initial accounting start Acct-Delay-Time = 0# no ack and retry after 5 secondsAcct-Delay-Time = 5 |
|
44 |
Acct-Session-Id |
string |
22 bytes |
For example: # Acct-Session-Id = 24ADFF0000000950C5F138 Acct-Session-Id 0x32313238343633353932313032353132313133343039 |
|
46 |
Acct-Session-Time |
integer |
42949672 seconds |
The attribute value wraps after approximately 497 days For example: Acct-Session-Time = 870 |
|
49 |
Acct-Terminate-Cause |
integer |
4 bytes |
Supported causes: 1=User-Request, 2=Lost-Carrier, 3=Lost-Service, 4=Idle-Timeout, 5=Session-Timeout, 6=Admin-Reset, 8=Port-Error, 10=NAS-Request, 15=Service-Unavailable See also table Acct Terminate Cause for complete overview For example: Acct-Terminate-Cause = User-Request |
|
50 |
Acct-Multi-Session-Id |
string |
22 bytes |
For example: Acct-Multi-Session-Id = 24ADFF0000000250C8EA5E |
|
55 |
Event-Timestamp |
date |
4 bytes |
For example: # Jul 6 2012 17:28:23 CEST is reported as 4FF70417Event-Timestamp = 4FF70417 |
|
87 |
NAS-Port-Id |
string |
253 bytes |
Ethernet SAPs: <slot>/<mda>/<port>:<vlan>.<vlan> For example: NAS-Port-Id = 1/1/4:50:100 |
|
95 |
NAS-IPv6-Address |
ipv6addr |
16 bytes |
# ipv6-address For example: NAS-IPv6-Address = 2001:db8::1 |
|
26.3561.1 |
Agent-Circuit-Id |
string |
247 chars |
Format, see also RFC 4679 # Ethernet/DSL <Access-Node-Identifier><eth slot/port[:vlan-id]> For example: ethernet dslam1 slot 2 port 1 vlan 100Agent-Circuit-Id = dslam1 eth 2/1:100 |
|
26.3561.2 |
Agent-Remote-Id |
string |
247 chars |
format see also RFC 4679 For example: Agent-Remote-Id = MyRemoteId |
|
26.6527.165 |
Alc-Dyn-Serv-Script-Params |
string |
multiple VSAs per tag per message. Max length of concatenated strings per tag = 1000 bytes |
The script parameters may be continued across attribute boundaries. The concatenated string must have following format: ‟function-key”=<dictionary> where ‟function-key” specifies which Python functions are used and <dictionary> contains the actual parameters in a Python dictionary structure format. For example: Alc-Dyn-Serv-Script-Params:1 = ‟data_svc_1 = { 'as_id' : '100', 'comm_id' : '200', 'if_name' : 'itf1', 'ipv4_address' : '192.168.1.1', 'egr_ip_filter' : '100' , 'routes' : [{'to' : '172.16.1.0/24', 'next-hop' : '192.168.2.2'}, {'to' : '172.16.2.0/24', 'next-hop' : '192.168.2.2'}]} |
| Attribute ID | Attribute name | Acct start | Acct stop | Acct interim-update |
|---|---|---|---|---|
|
1 |
User-Name |
1 |
1 |
1 |
|
4 |
NAS-IP-Address |
0-1 |
0-1 |
0-1 |
|
25 |
Class |
0+ |
0+ |
0+ |
|
32 |
NAS-Identifier |
1 |
1 |
1 |
|
40 |
Acct-Status-Type |
1 |
1 |
1 |
|
41 |
Acct-Delay-Time |
1 |
1 |
1 |
|
44 |
Acct-Session-Id |
1 |
1 |
1 |
|
46 |
Acct-Session-Time |
0 |
1 |
1 |
|
49 |
Acct-Terminate-Cause |
0 |
1 |
0 |
|
50 |
Acct-Multi-Session-Id |
1 |
1 |
1 |
|
55 |
Event-Timestamp |
1 |
1 |
1 |
|
87 |
NAS-Port-Id |
1 |
1 |
1 |
|
95 |
NAS-IPv6-Address |
0-1 |
0-1 |
0-1 |
|
26.3561.1 |
Agent-Circuit-Id |
0-1 |
0-1 |
0-1 |
|
26.3561.2 |
Agent-Remote-Id |
0-1 |
0-1 |
0-1 |
|
26.6527.165 |
Alc-Dyn-Serv-Script-Params |
1+ |
1+ |
1+ |