aaa
Configures authentication, authorization and accounting (AAA) functionality at the subscriber level.
Product
All
Privilege
Security Administrator, Administrator
Mode
Exec > Global Configuration > Context Configuration > Subscriber Configuration
configure > context context_name > subscriber { default | name subscriber_name }
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-subscriber)# Syntax
[ no ] aaa { accounting interim { interval-timeout interval_timeout | normal | suppress } | group aaa_group_name | secondary-group aaa_secondary_group_name }
default aaa { accounting interim [ interval-timeout ] | group | secondary-group }
no aaa { accounting interim [ interval-timeout ] | group [ aaa_group_name ] | secondary-group } default
Configures the default setting for the specified parameter.
-
accounting : Enables AAA accounting for subscribers.
-
group : Uses the default AAA group—the one specified at the context level or in the default subscriber profile.
-
secondary-group : Removes the secondary AAA group from the subscriber configuration.
no
-
accounting : Disables AAA accounting for subscribers.
-
group : Uses the default AAA group—the one specified at the context level or in the default subscriber profile.
-
secondary-group : Removes the secondary AAA group from the subscriber configuration.
accounting interim { interval-timeout interval_timeout | normal | suppress }
Specifies when system should send an interim accounting record to the server.
-
interval-timeout : Specifies the time interval (in seconds) at which to send an interim accounting record.
interval_timeout must be an integer from 50 through 40000000.
-
normal : If RADIUS accounting is enabled, send this Acct-Status-Type message when normally required by operation.
-
suppress : If RADIUS accounting is enabled, suppress the sending of Acct-Status-Type message.
group aaa_group_name
Specifies the AAA server group for the subscriber for authentication and/or accounting.
aaa_group_name must be an alphanumeric string of 1 through 63 characters.
secondary-group aaa_secondary_group_name
Specifies the secondary AAA server group for the subscriber.
aaa_secondary_group_name must be an alphanumeric string of 1 through 63 characters.
Usage Guidelines
Use this command to configure AAA functionality at the subscriber level.
Instead of having a single list of servers per context, this feature configures multiple server groups within a context and applies individual server group for subscribers in that context. Each server group consists of a list of AAA servers for each AAA function (accounting, authentication, charging, etc.).
The AAA secondary server group supports the No-ACK RADIUS Targets feature in conjunction with PDSN/HA for secondary accounting (with different RADIUS accounting group configuration) to the RADIUS servers without expecting the acknowledgement from the server, in addition to standard RADIUS accounting. This secondary accounting will be an exact copy of all the standard RADIUS accounting message (RADIUS Start/Interim/Stop) sent to the standard AAA RADIUS server.
If the same AAA group is configured with both the aaa group aaa_group_name and the aaa secondary-group aaa_group_name commands, then this configuration will have no effect and secondary accounting will not happen.
The AAA secondary server group configuration takes effect only when used with subscriber accounting-mode set to radius-diameter. The RADIUS accounting triggers for both standard RADIUS accounting and secondary accounting will be taken from the AAA group configured with the aaa group aaa_group_name command. On the fly change of this configuration is not supported. Any change to the configuration will have effect only for new calls.
Example
aaa group star1 
Feedback