Technical Tip: How to configure FortiGate unit to send Radius accounting interim update to the Radius server
Description
This article explains how to configure a FortiGate unit to send accounting interim updates to the Radius accounting server to update the status of an active session.
Scope
FortiGate, FortiAuthenticator.
Solution
The FortiGate will send interim updates only if the accounting server supplies an Accounting-Interim-Interval attribute, either during the initial Access-Request/Access-Accept or in an Accounting reply. The configuration as follows;
edit <RADIUS_Server_Name>
set server <Radius_Server_IP> <----- Specify the IP address of the RADIUS authentication server.
set secret <password> <----- Secret used to authenticate with the RADIUS authentication server.
set acct-interim-interval 600 <----- Enable sending of Interim Accounting updates every 10 minutes. And minimum value is 60 seconds.
config accounting-server
edit 1
set status enable <----- Enable sending of RADIUS Accounting messages.
set server <RADIUS_Server_IP> <----- Specify the IP address of the RADIUS accounting server.
set secret <password> <----- Secret used to authenticate with the RADIUS accounting server.
next
end
next
Note:
edit <RADIUS_Server_Name>
set server <Radius_Server_IP> <----- Specify the IP address of the RADIUS authentication server.
set secret <password> <----- Secret used to authenticate with the RADIUS authentication server.
set acct-interim-interval 600 <----- Enable sending of Interim Accounting updates every 10 minutes. And minimum value is 60 seconds.
config accounting-server
edit 1
set status enable <----- Enable sending of RADIUS Accounting messages.
set server <RADIUS_Server_IP> <----- Specify the IP address of the RADIUS accounting server.
set secret <password> <----- Secret used to authenticate with the RADIUS accounting server.
next
end
next
Note:
The Radius server must send the attribute “Acct-Interim-Interval=xxx” (seconds) in the access accept message.
Example configuration on Windows NPS server:
Example configuration on Windows NPS server:
Acct-Interim-Interval attribute sent by the Radius server:
Example configuration on FortiAuthenticator:
Add the acct-interim-interval to the User Groups on FortiAuthenticator and set the value to 600
