EditDiscussionPage history

Difference between revisions of "Accounting"

(새 문서: {| class="wikitable" ! 열이름 !! Attribute name!! 설명 |- | 사용자이름 || User-Name || 로그인 사용자 이름(아이디) |- | 호스트 MAC 주소 || Calling-Station-Id...)
 
 
(37 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 +
There are two RADIUS logs that are the Accounting and Postauth.
 +
The main difference is in which time a log is written. The Accounting log is saving while users are using a network after network access is granted.<br>However, the Postauth is written immediately after processing every ACCESS-REQUEST from users.
 +
For IEEE 802.1X Authenticators, this attribute is used to store the Supplicant MAC address.
 +
Some [[NAS]] devices may not support accounting. Also, depends on the [[NAS]] device, the according may be a little different.
 +
 
{| class="wikitable"
 
{| class="wikitable"
−
! 열이름 !! Attribute name!! 설명
+
! style='width:200px' | Items !! style='width:180px'  | Attribute name!! Description
 
|-
 
|-
−
| 사용자이름 || User-Name || 로그인 사용자 이름(아이디)
+
| Username|| User-Name || It indicates the name of the user to be authenticated.
 
|-
 
|-
−
| 호스트 MAC 주소 || Calling-Station-Id || 사용자 단말의 물리적 주소(이더넷 혹은 MAC 주소)
+
| Calling-Station-ID || Calling-Station-Id || This Attribute allows the NAS to send in the Access-Request packet the phone number that the call came from, using Automatic Number Identification (ANI) or similar technology.
 +
For IEEE 802.1X Authenticators, this attribute is used to store the Supplicant MAC address. <br>
 +
The imRAD saves the Calling-Station-ID after stripping some delimiters, such as "-" or ":".
 
|-
 
|-
−
| realm || Realm || [[realm|realm]] 문서를 참고하세요.
+
| Calling-Station-ID(nostrip) || Calling-Station-Id || This is the same as the above except for stripping the delimiters.
 
|-
 
|-
−
| NAS || NAS-IP-Address|| NAS IP 주소를 의미하며 자세하 사항은 [[NAS|NAS]] 문서를 참고하세요.
+
| Host IPv4 Address || Framed-IP-Address || It is the IPv4 address of a supplicant.
 
|-
 
|-
−
| NAS 포트 ID || NAS-Port-Id || NAS 식별자이며 [[NAS Identifier|NAS Identifier]] 문서를 참고하세요.
+
| Host IPv6 Address || Framed-IPv6-Address || It is the IPv6 address of a supplicant.
 
|-
 
|-
−
| NAS ID || NAS-Identifier|| NAS 포트 식별자입니다. 이 식별자는 NAS의 이더넷 인터페이스 설명(description)을 의미합니다.
+
| realm || Realm || It is the name of [[Realm and proxy| realm]] in a username.
 +
|-
 +
| NAS || NAS-IP-Address|| It is the IP address of a [[NAS]].
 +
|-
 +
| NAS ID || NAS-Identifier|| It is the the [[NAS Identifier | NAS Identifier]].
 +
|-
 +
| NAS Port ID || NAS-Port-Id || It identifies the port of the NAS which is authenticating the user. This typically matches the interface description.<ref>https://www.cisco.com/c/en/us/td/docs/ios/12_2sb/feature/guide/rd_naspt.html#wp1066674</ref>
 +
|-
 +
| NAS Port Type || NAS-Port-Type || It indicates the type of physical port the NAS is using to authenticate the user. <ref>https://www.cisco.com/c/en/us/td/docs/ios/12_2sb/feature/guide/rd_naspt.html#wp1049275</ref>
 +
<ref>https://www.iana.org/assignments/radius-types/radius-types.xhtml#radius-types-13</ref>
 +
|-
 +
| Save Time || - || The date and time that the Accounting was saved in the local database. This value changes whenever the Accounting is received.
 +
|-
 +
| Start Time || - || The first date and time that network access is granted.
 +
|-
 +
| Stop Time || - || The date and time that network access is closed. If this value is blank, it means that the user is still using network.
 +
|-
 +
| Update Time || - || The recent date and time of the Accounting was received.
 +
|-
 +
| Session Time || Acct-Session-Time || This attribute indicates how many seconds the user has received service for.
 +
|-
 +
| Input || Acct-Input-Packets || This attribute indicates how many packets have been received from the port over the course of this service being provided to a Framed User.
 +
|-
 +
| Output|| Acct-Output-Packets || This attribute indicates how many packets have been sent to the port in the course of delivering this service to a Framed User.
 +
|-
 +
| Authentic || Acct-Authentic || It indicates how the user was authenticated and is either RADIUS, Local, or Remote.<ref>https://tools.ietf.org/html/rfc2866#page-16</ref><br>
 +
The RADIUS means that a user was authenticated by a RADIUS server. The Local means that a user was authenticated by a NAS.
 +
The Remote means that a user was authenticated by others.
 +
|-
 +
| Interval || Acct-Interim-Interval || It indicates the number of seconds between each interim update in seconds.<ref>https://tools.ietf.org/html/rfc2869#page-36</ref>
 +
|-
 +
| Terminate-Cause|| Acct-Terminate-Cause || It indicates how the session was terminated.<ref>https://tools.ietf.org/html/rfc2866#page-19</ref>
 +
|-
 +
|Called-Station-ID || Called-Station-ID || For IEEE 802.1X Authenticators, this attribute is used to store the bridge or Access Point MAC address.<ref>https://www.oreilly.com/library/view/radius/0596003226/re07.html</ref><ref>https://tools.ietf.org/html/rfc2865#page-50</ref>
 +
|-
 +
| Service Type || Service-Type || This Attribute indicates the type of service the user has requested, or the type of service to be provided.<ref>https://tools.ietf.org/html/rfc2865#page-31</ref>
 +
|-
 +
| coning || Connect-Info || This attribute is sent from the NAS to indicate the nature of the user's connection.<ref>https://tools.ietf.org/html/rfc2869#page-30</ref>
 +
|-
 +
| Message || - || It is generated by authentication processing results, refer to the "[[Authentication Processing Messages]]" section for the main messages originating from Access-Reject.
 
|-
 
|-
 
|}
 
|}
 +
 +
=== References ===

Latest revision as of 18:19, 9 August 2023

There are two RADIUS logs that are the Accounting and Postauth. The main difference is in which time a log is written. The Accounting log is saving while users are using a network after network access is granted.
However, the Postauth is written immediately after processing every ACCESS-REQUEST from users. For IEEE 802.1X Authenticators, this attribute is used to store the Supplicant MAC address. Some NAS devices may not support accounting. Also, depends on the NAS device, the according may be a little different.

Items Attribute name Description
Username User-Name It indicates the name of the user to be authenticated.
Calling-Station-ID Calling-Station-Id This Attribute allows the NAS to send in the Access-Request packet the phone number that the call came from, using Automatic Number Identification (ANI) or similar technology.

For IEEE 802.1X Authenticators, this attribute is used to store the Supplicant MAC address.
The imRAD saves the Calling-Station-ID after stripping some delimiters, such as "-" or ":".

Calling-Station-ID(nostrip) Calling-Station-Id This is the same as the above except for stripping the delimiters.
Host IPv4 Address Framed-IP-Address It is the IPv4 address of a supplicant.
Host IPv6 Address Framed-IPv6-Address It is the IPv6 address of a supplicant.
realm Realm It is the name of realm in a username.
NAS NAS-IP-Address It is the IP address of a NAS.
NAS ID NAS-Identifier It is the the NAS Identifier.
NAS Port ID NAS-Port-Id It identifies the port of the NAS which is authenticating the user. This typically matches the interface description.[1]
NAS Port Type NAS-Port-Type It indicates the type of physical port the NAS is using to authenticate the user. [2]

[3]

Save Time - The date and time that the Accounting was saved in the local database. This value changes whenever the Accounting is received.
Start Time - The first date and time that network access is granted.
Stop Time - The date and time that network access is closed. If this value is blank, it means that the user is still using network.
Update Time - The recent date and time of the Accounting was received.
Session Time Acct-Session-Time This attribute indicates how many seconds the user has received service for.
Input Acct-Input-Packets This attribute indicates how many packets have been received from the port over the course of this service being provided to a Framed User.
Output Acct-Output-Packets This attribute indicates how many packets have been sent to the port in the course of delivering this service to a Framed User.
Authentic Acct-Authentic It indicates how the user was authenticated and is either RADIUS, Local, or Remote.[4]

The RADIUS means that a user was authenticated by a RADIUS server. The Local means that a user was authenticated by a NAS. The Remote means that a user was authenticated by others.

Interval Acct-Interim-Interval It indicates the number of seconds between each interim update in seconds.[5]
Terminate-Cause Acct-Terminate-Cause It indicates how the session was terminated.[6]
Called-Station-ID Called-Station-ID For IEEE 802.1X Authenticators, this attribute is used to store the bridge or Access Point MAC address.[7][8]
Service Type Service-Type This Attribute indicates the type of service the user has requested, or the type of service to be provided.[9]
coning Connect-Info This attribute is sent from the NAS to indicate the nature of the user's connection.[10]
Message - It is generated by authentication processing results, refer to the "Authentication Processing Messages" section for the main messages originating from Access-Reject.

References

  1. ↑ https://www.cisco.com/c/en/us/td/docs/ios/12_2sb/feature/guide/rd_naspt.html#wp1066674
  2. ↑ https://www.cisco.com/c/en/us/td/docs/ios/12_2sb/feature/guide/rd_naspt.html#wp1049275
  3. ↑ https://www.iana.org/assignments/radius-types/radius-types.xhtml#radius-types-13
  4. ↑ https://tools.ietf.org/html/rfc2866#page-16
  5. ↑ https://tools.ietf.org/html/rfc2869#page-36
  6. ↑ https://tools.ietf.org/html/rfc2866#page-19
  7. ↑ https://www.oreilly.com/library/view/radius/0596003226/re07.html
  8. ↑ https://tools.ietf.org/html/rfc2865#page-50
  9. ↑ https://tools.ietf.org/html/rfc2865#page-31
  10. ↑ https://tools.ietf.org/html/rfc2869#page-30