Radius Accounting

Reply
Highlighted
L0 Member

Radius Accounting

Is there a way to configure the boxes to act as a NAS by sending a Radius Server (like Freeradius) accounting information? I am particularly interested on the session start and session stop attributes. I am about to provide Globalprotect VPN access to a community of users and need to account the resource use in the same Radius server where the authentication is done. Thank you for your help.

Highlighted
L4 Transporter

 

The on logs I remember about it are the following in the system logs, not sure it those are the ones you're looking for.

globalprotect informational globalprotectgateway-auth-succ GlobalProtect gateway user authentication succeeded. Login from: 1.1.1.1, User name: username.
globalprotect informational globalprotectgateway-config-release

GlobalProtect gateway client configuration released. User name: username, Private IP: 1.1.1.1.

globalprotect informational globalprotectgateway-logout-succ GlobalProtect gateway user logout succeeded. User name: username, Reason: reason.

 

Currently the only way to send the system logs is forwarding to a syslog server, so the syslog server needs to parse them and resend them to your radius probably using a custom script.

Another way will be to create a script using the xml api in order to query the logs, parse the info and resends it to the radius server.Hope it helps,

 

Gerardo.

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!