functionality allows service providers to send accounting information to their own private AAA servers and to the AAA servers of their end customers. It also provides redundant billing information for voice applications. Broadcasting is allowed among groups of RADIUS or TACACS+ servers, and each server group can define its backup servers for failover independently of other groups. Thus, service providers and their end customers can use different protocols (RADIUS or TACACS+) for the accounting server. Service providers and their end customers can also specify their backup servers independently.
As for voice applications, redundant accounting information can be managed independently through a separate group with its own failover sequence. AAA Session MIB The AAA session MIB feature allows customers to monitor and terminate their authenticated client connections using Simple Network Management Protocol (SNMP). The data of the client is presented so that it correlates directly to the AAA Accounting information reported by either the RADIUS or the TACACS+ server. AAA session MIB provides the following information:
• Statistics for each AAA function (when used in conjunction with the show radius statistics command) • Status of servers providing AAA functions • Identities of external AAA servers • Real-time information (such as idle times), providing additional criteria for use by SNMP networks for assessing whether or not to terminate an active call The table below shows the SNMP user-end data objects that can be used to monitor and terminate authenticated client connections with the AAA session MIB feature. Table 2: SNMP End-User Data Objects The table below describes the AAA summary information provided by the AAA session MIB feature using SNMP on a per-system basis. Table 3:
SNMP AAA Session Summary Configuring Accounting AAA Session MIB SessionId The session identification used by the AAA Accounting protocol (same value as reported by RADIUS attribute 44 (Acct-Session-ID)). UserId The user login ID or zero-length string if a login is unavailable. IpAddr The IP address of the session or 0.0.0.0 if an IP address is not applicable or unavailable. IdleTime The elapsed time in seconds that the session has been idle. Disconnect The session termination object used to disconnect the given client. CallId The entry index corresponding to this accounting session that the Call Tracker record stored. ActiveTableEntries Number of sessions currently active.
ActiveTableHighWaterMark Maximum number of sessions present at once since last system reinstallation. TotalSessions Total number of sessions since last system reinstallation. Configuring Accounting 14