[Peter Nixon]

On Tue 31 Jul 2007, Kennie Lionheart wrote:
> Hi,
>
>
> I have a question about Freeradius' log.
>
> My costomer has used Remote Access VPN with Freeradius and Cisco VPN 3000,
> and 2 months ago, they added Cisco ASA on their system in order to expanse
> their VPN system. Now their users can use both VPN 3000 and ASA. VPN
> 3000's IP address is xx.xxx.xxx.9 and ASA's IP address is xxx.xxx.xxx.10.
> Both are global addresses.
>
> When their users use VPN through VPN 3000, ahthentication log can be seen
> on /var/log/radius/radacct/xxx.xxx.xxx.9, however when their users use VPN
> though ASA, no log can be seen in /var/log/radius/radacct/. I think
> xxx.xxx.xxx.10 should be seen there for the newly added ASA. Of course
> their users can connect to servers since they are ahtenticated and
> authorized, but no log are made on radius server. Does nyone have any idea
> about this? any solutions? any more configurations?

Yep. Configure the ASA to send RADIUS accounting. FreeRADIUS only logs what 
it receives...

-- 

Peter Nixon
http://peternixon.net/