| Attribute ID | Attribute name | Description |
|---|---|---|
|
1 |
User-Name |
Refers to the username reported in Accounting for subscriber-aware or subscriber-unaware Large Scale NAT (LSN) users. The reported format for subscriber-unaware users is LSN44@, DS-lite@ or NAT64@ followed by the user’s inside IPv4 or IPv6 address. The reported format and length for subscriber-aware users is configured and driven by configure router nat inside subscriber-identification and send when user-name is included under configure aaa isa-radius-policy name acct-include-attributes. This attribute has the same content as [26.6527.11] Alc-Subsc-ID-Str for subscriber-unaware Large Scale NAT users. |
|
4 |
NAS-IP-Address |
The identifying IP Address of the NAS requesting the Authentication or Accounting and maps to the IPv4 address from the system interface (configure router interface system address ip-address). |
|
5 |
NAS-Port |
Unique 32 bit encoded number [31 to 0] that holds the MS-ISA MDA used for LSN accounting. The following formatting is used [3 bits 31 to 29 value 000], [4 bits 28 to 25 value slot-ms-isa], [4 bits 24 to 21 value mda-nbr-ms-isa], [6 bits 20 to 15 000010], [15 bits 14 to 0 0000 0000 0000 0000]. |
|
8 |
Framed-IP-Address |
Refers to the inside private IP address of the user (LSN44) and send when framed-ip-addr is included in configure aaa isa-radius-policy name acct-include-attributes. |
|
30 |
Called-Station-Id |
Holds information to which nat-group and nat-member the NAT user belongs. The format of this attribute is a string 00-00-00-00-NatGroup-NatMember. The command show isa nat-group holds the link between ms-isa mda, NatGroup and NatMember. Optionally sent when called-station-id is included under configure aaa isa-radius-policy name acct-include-attributes. |
|
32 |
NAS-Identifier |
A string (configure system name system-name) identifying the NAS originating the Authentication or Accounting requests and sent when nas-identifier is included for the corresponding application: configure subscriber-mgmt radius-accounting-policy (ESM accounting), configure aaa isa-radius-policy (LSN accounting, WLAN-GW) and configure aaa l2tp-accounting-policy (L2TP accounting). |
|
40 |
Acct-Status-Type |
Indicates the LSN Accounting-Request type. Accounting On is sent on MS-ISA restart, when a radius-accounting-policy is added in an isa nat-group nat-group-id and when adding a server in the aaa isa-radius-policy name. Accounting Off is sent when removing a server from the aaa isa-radius-policy name. With start/stop accounting, an Accounting-Start is sent when a port-range-block is assigned to a user and an Accounting-Stop when the port-range-block is released into the pool. With interim accounting, an Accounting-Start is sent when the first port-range-block is assigned to a user. An Accounting Interim Update is sent when additional port-range blocks are assigned or released. An Accounting-Stop is sent when the last port-range block is released. |
|
42 |
Acct-Input-Octets |
Indicates how many Layer 3 octets were sent to this NAT user over the course of this service being provided and sent together with [43] Acct-Output-Octets, [52] Acct-Input-Gigawords and [53] Acct-Output-Gigawords when octet-counters is included under configure aaa isa-radius-policy name acct-include-attributes. |
|
43 |
Acct-Output-Octets |
Indicates how many Layer 3 octets have been received from this nat user over the course of this service being provided and send together with [42] Acct-Input-Octets, [52] Acct-Input-Gigawords and [53] Acct-Output-Gigawords when octet-counters is included under configure aaa isa-radius-policy name acct-include-attributes. |
|
44 |
Acct-Session-Id |
This unique 16 bytes attribute has two different behaviors. If multi-session-id is not included under configure aaa isa-radius-policy name acct-include-attributes then multiple port-ranges for the same user are all reported with a common 16 bytes [44] Acct-Session-id for the different port-ranges and reported using start, interim and stop accounting messages and without attribute [50] Acct-Multi-Session-Id. If multi-session-id is configured under configure aaa isa-radius-policy name acct-include-attributes then multiple port-ranges for the same user are reported with different 16 bytes [44] Acct-Session-id using start and stop accounting messages with an additional common 16 bytes attribute [50] Acct-Multi-Session-Id. For an accounting-on and accounting-off the first 8 bytes from the 16 bytes are put to zero. |
|
46 |
Acct-Session-Time |
Reports the elapsed time in seconds the user has allocated a unique port-range in accounting start, interim or stop. For accounting-off it reports the elapsed time in second since the last accounting-on. |
|
47 |
Acct-Input-Packets |
Indicates how many packets have been send for this nat user over the course of this service being provided and send together with [48] Acct-Output-Packets when frame-counters is included under configure aaa isa-radius-policy name acct-include-attributes. |
|
48 |
Acct-Output-Packets |
Indicates how many packets have been received for this nat user over the course of this service being provided and send together with [47] Acct-Input-Packets when frame-counters is included under configure aaa isa-radius-policy name acct-include-attributes. |
|
49 |
Acct-Terminate-Cause |
Indicates why a specific NAT port-range is released in Acct-Stop messages. Cause host-Request is used If the last port-range for this NAT user is freed and cause port-unneeded is used when we release a port-range which is not the last one (multiple port-ranges) for this NAT user. Cause [10]Nas-request is reported in Accounting-Off and cause [11]Nas-reboot is reported in Accounting-on. This attribute is only sent when release-reason is included under configure aaa isa-radius-policy name acct-include-attributes. |
|
50 |
Acct-Multi-Session-Id |
This unique 16 bytes attribute has two different behaviors. If multi-session-id is not included under configure aaa isa-radius-policy name acct-include-attributes then multiple port-ranges for the same user are all reported with a common 16 bytes [44] Acct-Session-id for the different port-ranges and reported using start, interim and stop accounting messages and without attribute [50] Acct-Multi-Session-Id. If multi-session-id is included under configure aaa isa-radius-policy name acct-include-attributes then multiple port-ranges for the same user are reported with different 16 bytes [44] Acct-Session-id using start and stop accounting messages with an additional common 16 bytes attribute [50] Acct-Multi-Session-Id. |
|
52 |
Acct-Input-Gigawords |
Indicates how many times (zero or more) the [42] Acct-Input-Octets counter has wrapped around 2^32 in the course of delivering this service and send together with [42] Acct-Input-Octets, [43] Acct-Output-Octets and [53] Acct-Output-Gigawords when octet-counters is included under configure aaa isa-radius-policy name acct-include-attributes. |
|
53 |
Acct-Output-Gigawords |
Indicates how many times (zero or more) the [43] Acct-Output-Octets counter has wrapped around 2^32 in the course of delivering this service and send together with [42] Acct-Input-Octets, [43] Acct-Output-Octets and [52] Acct-Input-Gigawords when octet-counters is included under configure aaa isa-radius-policy name acct-include-attributes. |
|
55 |
Event-Timestamp |
Record the time that this event occurred on the NAS, in seconds since January 1, 1970 00:00 UTC and send when hardware-timestamp is included under configure aaa isa-radius-policy name acct-include-attributes. |
|
97 |
Framed-IPv6-Prefix |
Inside private IPv6 address of the user (NAT64,DSLITE) and send when framed-ipv6-prefix is included under configure aaa isa-radius-policy name acct-include-attributes. |
|
26.6527.11 |
Alc-Subsc-ID-Str |
The reported format is LSN44@, DS-lite@ and NAT64@ followed by the users inside IPv4 or IPv6 address and send when nat-subscriber-string is included under configure aaa isa-radius-policy name acct-include-attributes. This attribute has the same content as [1]User-Name for subscriber-unaware Large Scale NAT users. |
|
26.6527.100 |
Alc-Serv-Id |
Refers in the Accounting-Request to the inside service-id used for LSN subscribers using RADIUS LSN accounting (configure aaa isa-radius-policy name nat acct-include-attributes inside-service-id). The outside service-id is reported using [26.6527.140] Alc-Nat-Outside-Serv-Id. |
|
26.6527.121 |
Alc-Nat-Port-Range |
This attribute is used to report allocated or released NAT resources in LSN. The reported NAT resources include a public IPv4 address, public port ranges, and outside routing instance. This attribute is included in accounting by configuring the port-range-block option under the configure aaa isa-radius-policy name acct-include-attributes CLI hierarchy. |
|
26.6527.140 |
Alc-Nat-Outside-Serv-Id |
Refers to the public outside service-id and send when outside-service-id is included under configure aaa isa-radius-policy name acct-include-attributes. |
|
26.6527.141 |
Alc-Nat-Outside-Ip-Addr |
Holds for the NAT user his public outside IPv4 address and send when outside-ip is included under configure aaa isa-radius-policy name acct-include-attributes. The content of this attribute is identical to the outside IPv4 address in [26.6527.121] Alc-Nat-Port-Range. |
|
26.6527.163 |
Alc-Acct-Triggered-Reason |
A reason attribute included in Acct-Interim messages to specify the reason for the interim update. Attribute is included in LSN accounting only when acct-include-attribute acct-trigger-reason is enabled in the isa-radius-policy. |
| Attribute ID | Attribute name | Type | Limits | SR OS format |
|---|---|---|---|---|
|
1 |
User-Name |
string |
[32|64] chars |
Subscriber unaware: LSN44@<ipaddr>, DS-lite@<ipv6addr> and NAT64@<ipv6addr>Subscriber aware: format and length depends on the subscriber-identification attribute configuration- attribute-type alc-sub-string max 32 chars- attribute-type user-name, class and station-id max 64 chars- attribute-type imsi and imei max 32 chars For example: # subscriber unaware: NAT64 host ipv6 address 2001:db8::1User-Name = NAT64@2001:0db8:0000:0000:0000:0000:0000:0001# subscriber aware: NAS subscriber-id = private-user1 and subscriber-identification alc-sub-stringUser-Name = private-user1 |
|
4 |
NAS-IP-Address |
ipaddr |
4 bytes |
For example: # ip-address 10.1.1.1 NAS-IP-Address 0a010101 |
|
5 |
NAS-Port |
integer |
4 bytes |
For example: # MS-ISA MDA 1/2 # 1/2/nat-out-ip corresponds to [000] [slot 0001] [mda 0010] [nat-outip 00010] [000 0000 0000 0000]: value 37814272# Note - nat-out-ip is translated value 2 (00010) and it represents the logical port on the ms-isa (show port 1/2 returns all virtual ports) NAS-Port = 37814272 |
|
8 |
Framed-IP-Address |
ipaddr |
4 bytes |
For example: # private inside ipv4address LSN44 user192.168.0.1 Framed-IP-Address = 192.168.0.1 |
|
30 |
Called-Station-Id |
string |
17 bytes |
00-00-00-00-<natgroup>-<natmember> For example: # nat group 1 and nat member 1# Called-Station-Id = 30302d30302d30302d30302d30312d30312dCalled-Station-Id = 00-00-00-00-01-01 |
|
32 |
NAS-Identifier |
string |
64 chars |
For example: NAS-Identifier = PE1-Antwerp |
|
40 |
Acct-Status-Type |
integer |
4 bytes |
1=Start, 2=Stop, 3=Interim Update, 7=Accounting-On, 8=Accounting-Off |
|
42 |
Acct-Input-Octets |
integer |
4 bytes |
For example: Acct-Input-Octets = 5000 |
|
43 |
Acct-Output-Octets |
integer |
4 bytes |
For example: Acct-Output-Octets = 2000 |
|
44 |
Acct-Session-Id |
string |
32 bytes |
No useful information can be extracted from the string. For example: # internal generated asid 32 Bytes/16 chars: 0x3466666434383332306232313436393738363238346262323339326462636232 Acct-Session-Id = 4ffd48320b21469786284bb2392dbcb2 |
|
46 |
Acct-Session-Time |
integer |
4 bytes 4294967295 seconds |
For example: Acct-Session-Time = 870 |
|
47 |
Acct-Input-Packets |
integer |
4 bytes 4294967295 packets |
For example: Acct-Input-Packets = 15200 |
|
48 |
Acct-Output-Packets |
integer |
4 bytes 4294967295 packets |
For example: Acct-Output-Packets = 153537 |
|
49 |
Acct-Terminate-Cause |
integer |
4 bytes |
See also table Acct Terminate Cause 10=Nas-Request, 11=Nas-Reboot, 14=Port-Suspended, 18=Host-Request For example: Acct-Terminate-Cause = Port-unneeded |
|
50 |
Acct-Multi-Session-Id |
string |
32 bytes |
No useful information can be extracted from the string. For example: # internal generated asid 32 Bytes/16 chars: 0x3566666434383332306232313436393738363238346262323339326462636232 Acct-Multi-Session-Id = 5ffd48320b21469786284bb2392dbcb2 |
|
52 |
Acct-Input-Gigawords |
integer |
4 bytes |
For example: # no overflowAcct-Input-Gigawords = 0 |
|
53 |
Acct-Output-Gigawords |
integer |
4 bytes |
For example: # no overflowAcct-Output-Gigawords = 0 |
|
55 |
Event-Timestamp |
date |
4 bytes |
For example: # Jul 6 2012 17:28:23 CEST is reported as 4FF70417Event-Timestamp = 4FF70417 |
|
97 |
Framed-IPv6-Prefix |
ipv6prefix |
max. 16 bytes for prefix + 1 byte for length |
private inside IPv6 address of NAT64 or DS-Lite user For example: Framed-IPv6-Prefix = 2001:db8::1/128 |
|
26.6527.11 |
Alc-Subsc-ID-Str |
string |
64 chars |
LSN44@<ipaddr>, DS-lite@<ipv6addr> and NAT64@<ipv6addr> For example: Alc-Subsc-ID-Str = LSN44@192.168.0.1 Alc-Subsc-ID-Str = DS-Lite@2001:0000:0000:0000:0000:0000:0000:0001 Alc-Subsc-ID-Str = NAT64@2002:0000:0000:0000:0000:0000:0000:0001 |
|
26.6527.100 |
Alc-Serv-Id |
integer |
2147483647 ID |
VPRN service ID or 0 (zero) when inside service is the Base routing instance. For example: inside VPRN service 100: Alc-Serv-Id = 100 |
|
26.6527.121 |
Alc-Nat-Port-Range |
string |
no limits |
<public-ip> <space> <port-range> <space> router <space> <outside-routing-instance> <space> <nat-policy-name> For example: a host with public pool address 198.51.100.248; port-range [37674 to 37723] in Base with nat-policy-name = nat-pol-1 Alc-Nat-Port-Range = ‟198.51.100.248 37674-37723 router base nat-pol-1” |
|
26.6527.140 |
Alc-Nat-Outside-Serv-Id |
integer |
2147483647 ID |
VPRN service ID or 0 (zero) when outside service is the Base routing instance. For example: outside VPRN service 200: Alc-Nat-Outside-Serv-Id = 200 |
|
26.6527.141 |
Alc-Nat-Outside-Ip-Addr |
ipaddr |
4 bytes |
For example: Alc-Nat-Outside-Ip-Addr = 198.51.100.248 |
|
26.6527.163 |
Alc-Acct-Triggered-Reason |
integer |
4 bytes |
See Table: Accounting triggered reason for a description of Accounting Triggered Reason values. For example: ACCT TRIGGERED INTERIM REASON [163] 4 Nat-Free (19) |
| Attribute ID | Attribute name | Acct start | Acct stop | Acct interim-update | Acct on | Acct off |
|---|---|---|---|---|---|---|
|
1 |
User-Name |
0-1 |
0-1 |
0-1 |
0 |
0 |
|
4 |
NAS-IP-Address |
1 |
1 |
1 |
1 |
1 |
|
5 |
NAS-Port |
1 |
1 |
1 |
1 |
1 |
|
8 |
Framed-IP-Address |
0-1 |
0-1 |
0-1 |
0 |
0 |
|
30 |
Called-Station-Id |
0-1 |
0-1 |
0-1 |
0-1 |
0-1 |
|
32 |
NAS-Identifier |
0-1 |
0-1 |
0-1 |
0-1 |
0-1 |
|
40 |
Acct-Status-Type |
1 |
1 |
1 |
1 |
1 |
|
42 |
Acct-Input-Octets |
0 |
0-1 |
0-1 |
0 |
0 |
|
43 |
Acct-Output-Octets |
0 |
0-1 |
0-1 |
0 |
0 |
|
44 |
Acct-Session-Id |
1 |
1 |
1 |
1 |
1 |
|
46 |
Acct-Session-Time |
1 |
1 |
1 |
1 |
1 |
|
47 |
Acct-Input-Packets |
0-1 |
0-1 |
0-1 |
0 |
0 |
|
48 |
Acct-Output-Packets |
0-1 |
0-1 |
0-1 |
0 |
0 |
|
49 |
Acct-Terminate-Cause |
0 |
0-1 |
0 |
0-1 |
0-1 |
|
50 |
Acct-Multi-Session-Id |
0-1 |
0-1 |
0 |
0 |
0 |
|
52 |
Acct-Input-Gigawords |
0 |
0-1 |
0-1 |
0 |
0 |
|
53 |
Acct-Output-Gigawords |
0 |
0-1 |
0-1 |
0 |
0 |
|
55 |
Event-Timestamp |
0-1 |
0-1 |
0-1 |
0-1 |
0-1 |
|
97 |
Framed-IPv6-Prefix |
0-1 |
0-1 |
0-1 |
0 |
0 |
|
26.6527.11 |
Alc-Subsc-ID-Str |
0-1 |
0-1 |
0-1 |
0 |
0 |
|
26.6527.100 |
Alc-Serv-Id |
0-1 |
0-1 |
0-1 |
0 |
0 |
|
26.6527.121 |
Alc-Nat-Port-Range |
0-1 |
0-1 |
0-1 |
0 |
0 |
|
26.6527.140 |
Alc-Nat-Outside-Serv-Id |
0-1 |
0-1 |
0-1 |
0 |
0 |
|
26.6527.141 |
Alc-Nat-Outside-Ip-Addr |
0-1 |
0-1 |
0-1 |
0 |
0 |
|
26.6527.163 |
Alc-Acct-Triggered-Reason |
0 |
0 |
0-1 |
0 |
0 |