Hi, Fduch the Pravking wrote: > I'll try to be clear :) > We have Cisco 2500 with IOS 12.0(4) > and it seems to have such bug... > > Some user tries to log in on this Cisco, > and gets Access-Reject, but Cisco > (I don't know whether it has already > processed Access-Reject at this moment) > sends Accounting-Stop packet for that user > without corresponding Accounting-Start packet. > > Probably, this user disconnects BEFORE > Cisco gets Access-Reject, and then it > decided to send Stop-record... > > Did anybody see such problem and what are > possible workarounds for this sutuations?
perhaps this is not a bug but rather a feature because I have found (and want use) two nice Cisco statements called "aaa accounting send stop-record authentication failure" and "aaa accounting resource default stop-failure" to log rejected login attempts and ressource problems... My problem is that the resulting stop-records have a AcctSessionTime of "0" and FreeRADIUS do not like them therefore... :-/ Gerald - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
