Got it

Send Accounting Packet to the Radius server from Huawei USG

Created: Jun 17, 2019 08:25:47Latest reply: Jun 29, 2019 01:24:52 2367 31 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hello , Iam working on hotspot system , Allthings working fine , I can Authenticate users by radius server .

my problem is after user get authenticated , USG did not send any Accounting packet like (Start or stop) from USG ,

I did all configuration to send these packet without success , this is my configuration

160507thxwf3ap9s69phzh.png?image.png

162449k1mnbf1g1ezz***u.png?image.png


radius Just receive Authentication request from the USG without any accounting packet.

when I apply this command I can get Accounting packets

test-aaa   test test radius-template  Radius accounting



but when user login by login page , there is no any accounting packet sent to the radius

please help me


Featured Answers
chenhui
Admin Created Jun 29, 2019 01:24:52

Posted by Muh.JM at 2019-06-24 12:44 hi , no there is no any vpn instance in my firewall . user is authenticated by radius server and ...
Hi, we need more detail information to locate the failure, you can contact the local TAC to create a SR query to feed back.
View more
  • x
  • convention:

All Answers
Do you mean that there is no accounting message for successful login authentication?
View more
  • x
  • convention:

Posted by Hobbit at 2019-06-17 08:52 Do you mean that there is no accounting message for successful login authentication?
yes exactly no any accounting message for success login , Even if I disconnect user from USG there is no any Stop accounting pacjet
View more
  • x
  • convention:

Hi, Muh.JM,
Have you checked the Authentication Policy? If the authentication action is exemption, the device will not send any accounting packet.
View more
  • x
  • convention:

Posted by Popeye_Wang at 2019-06-17 09:46 Hi, Muh.JM,Have you checked the Authentication Policy? If the authentication action is exemption, th ...
yes there is Exempt into the Authentication policy , but this is important because the portal is external portal , so I have to set exempt ,to allow user to access the captive portal , if you have any solution please help me
View more
  • x
  • convention:

Posted by Muh.JM at 2019-06-17 10:07 yes there is Exempt into the Authentication policy , but this is important because the portal is ...
I tried with local captive portal without any exempt but still not get any accounting packet
View more
  • x
  • convention:

@Muh.JM hi,
have you configured the accounting scheme?
In the default accounting scheme, non-accounting is used and the real-time accounting function is disabled.
View more
  • x
  • convention:

Posted by chenhui at 2019-06-17 11:25 @Muh.JM hi,have you configured the accounting scheme? In the default accounting scheme, non-accounti ...
thank you for your reply but how can I solve this problem , how can I enable it
View more
  • x
  • convention:

Posted by chenhui at 2019-06-17 11:25 @Muh.JM hi,have you configured the accounting scheme? In the default accounting scheme, non-accounti ...
this is my aaa configuration
aaa
authentication-scheme default
authentication-scheme admin_local
authentication-scheme admin_radius_local
authentication-scheme admin_hwtacacs_local
authentication-scheme admin_ad_local
authentication-scheme admin_ldap_local
authentication-scheme admin_radius
authentication-scheme admin_hwtacacs
authentication-scheme admin_ad
authentication-scheme admin_ldap
authentication-scheme 1
authentication-mode radius
authorization-scheme default
authorization-scheme authorDefault
authorization-mode radius
accounting-scheme default
accounting-mode radius
accounting-scheme accountDefault
accounting-mode radius
accounting-scheme 1
accounting-mode radius
View more
  • x
  • convention:

Posted by Muh.JM at 2019-06-17 14:46 this is my aaa configuration aaa authentication-scheme default authentication-scheme admin_local a ...
[USG6300-aaa-accounting-1]display this
2019-06-17 14:46.300 +03:00
#
accounting-scheme 1
accounting-mode radius
accounting start-fail online
accounting interim-fail max-times 2 online
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.