Project

General

Profile

Actions
Copy link

Bug #15176

closed

Change Mobile IPsec RADIUS accounting to use ``accounting_requires_vip`` so accounting will not activate for non-mobile VPNs

Added by Jim Pingle 4 months ago. Updated 3 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Jim Pingle
Category:
IPsec
Target version:
2.8.0
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
24.03
Release Notes:
Default
Affected Version:
Affected Architecture:

Description

At some point strongSwan's eap-radius plugin gained a setting called accounting_requires_vip which makes strongSwan only send accounting packets for connections with virtual IP addresses. Currently only mobile VPNs have virtual IP addresses, so enabling that option should make the current warning against RADIUS accounting on vpn_ipsec_mobile.php obsolete since it would no longer try to perform accounting for every tunnel on the firewall.

Alter the current RADIUS accounting plugin setup to set that flag (charon > plugins > eap-radius > accounting_requires_vip = yes) and reword the note on vpn_ipsec_mobile.php to account for the change.

Actions
Copy link

Also available in: Atom PDF