[strongSwan] Radacct table remind empty while working with SS and freeRadius

[Andreas Steffen]

Hi Ohad,

in order for the RADIUS accounting to work you have to

- load the eap-radius plugin (usually done automatically
   if you compile strongSwan with ./configure --enable-eap-radius

- define the RADIUS IP address, password and accounting = yes
   in /etc/strongswan.conf as in the following example:

 
http://www.strongswan.org/uml/testresults5/ikev2/rw-radius-accounting/moon.strongswan.conf

You should then get accounting records of the following kind:

alice# cat /var/log/radius/radacct/10.1.0.1/*
Sat Jun 30 02:12:27 2012
	Acct-Status-Type = Start
	Acct-Session-Id = "1341015144-1"
	User-Name = "carol"
	Calling-Station-Id = "192.168.0.100[4500]"
	NAS-Port-Type = Virtual
	NAS-Identifier = "strongSwan"
	NAS-IP-Address = 10.1.0.1
	Acct-Unique-Session-Id = "13fd26c67cd8d1be"
	Timestamp = 1341015147
	Request-Authenticator = Verified

Sat Jun 30 02:12:35 2012
	Acct-Status-Type = Stop
	Acct-Session-Id = "1341015144-1"
	User-Name = "carol"
	Calling-Station-Id = "192.168.0.100[4500]"
	Acct-Output-Octets = 7100
	Acct-Input-Octets = 7100
	Acct-Session-Time = 7
	NAS-Port-Type = Virtual
	NAS-Identifier = "strongSwan"
	NAS-IP-Address = 10.1.0.1
	Acct-Unique-Session-Id = "13fd26c67cd8d1be"
	Timestamp = 1341015155
	Request-Authenticator = Verified

Best regards

Andreas

On 07/19/2012 04:52 PM, ohad bobrov wrote:
> Hi ,
> I'm using SS 5.0(for Ikev1) with freeRadius with MySql.
> The authentication works ok but the Radacct (which suppose to log all
> the sessions) reminds emtpy.
> I have another service that uses the same radius service and for it the
> radacct is filled.
> Does anyone made SS log his data to the Radacct table?
>  From freeRadius documentation it says that it need to get  "accounting
> packets" from the other server in order to log the communication , does
> SS send it?
>
> Thanks,
> --
> Ohad Bobrov
> *LacoonSecurity LTD*
> 054-5442097 | w <http://www.blu-ridge.com/>ww.lacoonSecurity.com
> <http://www.lacoonSecurity.com>

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==