aaa accounting

Use this command in Global Config mode to create an accounting method list for user EXEC sessions, user-executed commands, or DOT1X. This list is identified by default or a user-specified list_name. Accounting records, when enabled for a line-mode, can be sent at both the beginning and at the end (start-stop) or only at the end (stop-only). If none is specified, then accounting is disabled for the specified list. If tacacs is specified as the accounting method, accounting records are notified to a TACACS+ server. If radius is the specified accounting method, accounting records are notified to a RADIUS (Remote Authentication Dial In User Service) server.

Note

A maximum of five Accounting Method lists can be created for each exec and commands type.
Only the default Accounting Method list can be created for DOT1X. There is no provision to create more.
The same list-name can be used for both exec and commands accounting type
AAA Accounting for commands with RADIUS as the accounting method is not supported.
Start-stop or None are the only supported record types for DOT1X accounting. Start-stop enables accounting and None disables accounting.
RADIUS is the only accounting method type supported for DOT1X accounting.

Format	aaa accounting {exec \| commands \| dot1x} {default \| list_name} {start-stop \| stop-only \|none} method1 [method2…]
Mode	Global Config

Parameter	Description
exec	Provides accounting for a user EXEC terminal sessions.
commands	Provides accounting for all user executed commands.
dot1x	Provides accounting for DOT1X user commands.
default	The default list of methods for accounting services.
list-name	Character string used to name the list of accounting methods.
start-stop	Sends a start accounting notice at the beginning of a process and a stop accounting notice at the beginning of a process and a stop accounting notice at the end of a process.
stop-only	Sends a stop accounting notice at the end of the requested user process.
none	Disables accounting services on this line.
method	Use either TACACS or RADIUS server for accounting purposes.

The following shows an example of the command.

(Extreme 220) (Routing) #
(Extreme 220) (Routing) #configure
(Extreme 220) (Routing) #aaa accounting commands default stop-only tacacs
(Extreme 220) (Routing) #aaa accounting exec default start-stop radius
(Extreme 220) (Routing) #aaa accounting dot1x default start-stop radius
(Extreme 220) (Routing) #aaa accounting dot1x default none
(Extreme 220) (Routing) #exit

For the same set of accounting type and list name, the administrator can change the record type, or the methods list, without having to first delete the previous configuration.

(Extreme 220) (Routing) #
(Extreme 220) (Routing) #configure
(Extreme 220) (Routing) #aaa accounting exec ExecList stop-only tacacs
(Extreme 220) (Routing) #aaa accounting exec ExecList start-stop tacacs
(Extreme 220) (Routing) #aaa accounting exec ExecList start-stop tacacs radius

The first aaa command creates a method list for exec sessions with the name ExecList, with record-type as stop-only and the method as TACACS+. The second command changes the record type to start-stop from stop-only for the same method list. The third command, for the same list changes the methods list to {tacacs,radius} from {tacacs}.

Published February 2019prev | next

Email this topic

Print this page Print this page

Leave feedback Feedback