Send Accounting Packet to the Radius server from Huawei USG

Created: Jun 17, 2019 08:25:47Latest reply: Jun 29, 2019 01:24:52 632 31 0 0
  Rewarded Hi-coins: 0 (problem resolved)

Hello , Iam working on hotspot system , Allthings working fine , I can Authenticate users by radius server .

my problem is after user get authenticated , USG did not send any Accounting packet like (Start or stop) from USG ,

I did all configuration to send these packet without success , this is my configuration

160507thxwf3ap9s69phzh.png?image.png

162449k1mnbf1g1ezz***u.png?image.png


radius Just receive Authentication request from the USG without any accounting packet.

when I apply this command I can get Accounting packets

test-aaa   test test radius-template  Radius accounting



but when user login by login page , there is no any accounting packet sent to the radius

please help me


  • x
  • convention:

Featured Answers
chenhui
Admin Created Jun 29, 2019 01:24:52 Helpful(0) Helpful(0)

Posted by Muh.JM at 2019-06-24 12:44 hi , no there is no any vpn instance in my firewall . user is authenticated by radius server and ...
Hi, we need more detail information to locate the failure, you can contact the local TAC to create a SR query to feed back.
  • x
  • convention:

All Answers
Hobbit
Hobbit Created Jun 17, 2019 08:52:13 Helpful(0) Helpful(0)

Do you mean that there is no accounting message for successful login authentication?
  • x
  • convention:

Muh.JM
Muh.JM Created Jun 17, 2019 09:00:05 Helpful(0) Helpful(0)

Posted by Hobbit at 2019-06-17 08:52 Do you mean that there is no accounting message for successful login authentication?
yes exactly no any accounting message for success login , Even if I disconnect user from USG there is no any Stop accounting pacjet
  • x
  • convention:

Popeye_Wang
Popeye_Wang Admin Created Jun 17, 2019 09:46:05 Helpful(0) Helpful(0)

Hi, Muh.JM,
Have you checked the Authentication Policy? If the authentication action is exemption, the device will not send any accounting packet.
  • x
  • convention:

Muh.JM
Muh.JM Created Jun 17, 2019 10:07:24 Helpful(0) Helpful(0)

Posted by Popeye_Wang at 2019-06-17 09:46 Hi, Muh.JM,Have you checked the Authentication Policy? If the authentication action is exemption, th ...
yes there is Exempt into the Authentication policy , but this is important because the portal is external portal , so I have to set exempt ,to allow user to access the captive portal , if you have any solution please help me
  • x
  • convention:

Muh.JM
Muh.JM Created Jun 17, 2019 10:09:46 Helpful(0) Helpful(0)

Posted by Muh.JM at 2019-06-17 10:07 yes there is Exempt into the Authentication policy , but this is important because the portal is ...
I tried with local captive portal without any exempt but still not get any accounting packet
  • x
  • convention:

chenhui
chenhui Admin Created Jun 17, 2019 11:25:52 Helpful(0) Helpful(0)

@Muh.JM hi,
have you configured the accounting scheme?
In the default accounting scheme, non-accounting is used and the real-time accounting function is disabled.
  • x
  • convention:

Muh.JM
Muh.JM Created Jun 17, 2019 14:30:29 Helpful(0) Helpful(0)

Posted by chenhui at 2019-06-17 11:25 @Muh.JM hi,have you configured the accounting scheme? In the default accounting scheme, non-accounti ...
thank you for your reply but how can I solve this problem , how can I enable it
  • x
  • convention:

Muh.JM
Muh.JM Created Jun 17, 2019 14:46:30 Helpful(0) Helpful(0)

Posted by chenhui at 2019-06-17 11:25 @Muh.JM hi,have you configured the accounting scheme? In the default accounting scheme, non-accounti ...
this is my aaa configuration
aaa
authentication-scheme default
authentication-scheme admin_local
authentication-scheme admin_radius_local
authentication-scheme admin_hwtacacs_local
authentication-scheme admin_ad_local
authentication-scheme admin_ldap_local
authentication-scheme admin_radius
authentication-scheme admin_hwtacacs
authentication-scheme admin_ad
authentication-scheme admin_ldap
authentication-scheme 1
authentication-mode radius
authorization-scheme default
authorization-scheme authorDefault
authorization-mode radius
accounting-scheme default
accounting-mode radius
accounting-scheme accountDefault
accounting-mode radius
accounting-scheme 1
accounting-mode radius
  • x
  • convention:

Muh.JM
Muh.JM Created Jun 17, 2019 14:47:39 Helpful(0) Helpful(0)

Posted by Muh.JM at 2019-06-17 14:46 this is my aaa configuration aaa authentication-scheme default authentication-scheme admin_local a ...
[USG6300-aaa-accounting-1]display this
2019-06-17 14:46.300 +03:00
#
accounting-scheme 1
accounting-mode radius
accounting start-fail online
accounting interim-fail max-times 2 online
  • x
  • convention:

Comment

Reply
You need to log in to reply to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Login and enjoy all the member benefits

Login and enjoy all the member benefits

Login