Overview

Sometimes a user might be authenticated in AAA but no record is found in the AAA DB Server - and the Subscriber is a valid user on the BNG side and there's an existing record in PCRF. The online session may be active and searchable but the subscriber is not present in the subscriber list.

Solution

RADIUS has a facility to provide an "Anonymous User Login". This is used in cases - When any subscriber roams into the service provider network and service providers allow unknown subscriber(s) to connect to the network with restricted policy for advertisement purposes or to sell/purchase a new package as per business need.

Verify if any RADIUS Service policies allow Anonymous User Login. In this case, it was identified that the anonymous user status is “ACTIVE” instead of “Inactive” in SPIN_AUTH_DRIVER. Due to that user was authenticated in AAA and able to access the internet.

The solution will be to change the status of the anonymous user from “Active” to “Inactive”

In addition for some customers, a custom solution has been implemented to monitor Anonymous user login.