Configuring ISG Accounting
How to Configure ISG Accounting
6
Enabling ISG Per-Flow Accounting
ISG per-flow accounting can be configured in the following configuration sources:
• Service profile on a AAA server
• Service policy map on the ISG device
This procedure contains the following sections:
• Prerequisites, page 6
• Enabling Per-Flow Accounting in a Service Profile on the AAA Server, page 6
• Enabling Per-Flow Accounting in a Service Policy Map on the Router, page 7
• Troubleshooting Tips, page 8
• What to Do Next, page 8
Prerequisites
ISG sends accounting records to the authentication, authorization, and accounting (AAA) method list
specified in the user profile, service profile, or service policy map. The tasks in this section assume that
you have configured a AAA method list by using the aaa accounting command. See the Cisco IOS
Security Command Reference for more information.
AAA servers must be configured to support ISG accounting.
Enabling Per-Flow Accounting in a Service Profile on the AAA Server
Perform this task to configure per-flow accounting in a service profile on the AAA server.
Prerequisites
This task assumes that you have defined IP access lists for specifying traffic.
SUMMARY STEPS
1. Cisco-AVpair = "ip:traffic-class={in | out} access-group [acl_number | name acl_name] [priority
n]"
2. Cisco-Avpair="accounting-list=accounting_mlist_name"
3. IETF RADIUS attribute Acct-Interim-Interval (attribute 85)
DETAILED STEPS
Step 1 Cisco-AVpair = "ip:traffic-class={in | out} access-group [acl_number | name acl_name] [priority n]"
Add the ISG Traffic Class attribute to the service profile. This attribute specifies input and output traffic
to which the service will apply. Both an input and output traffic classifier can be added to a service
profile.
Step 2 Cisco-Avpair="accounting-list=accounting_mlist_name"
To Next Page
Loading...
Need help?
General