Enabling and disabling login accounting (RADIUS)

Login information can be sent to a Remote Authentication Dial-In User Service (RADIUS) server for accounting purposes.

Before enabling login (EXEC) accounting, at least one RADIUS server host must be configured on the device by using the radius-server host command.
  1. From privileged EXEC mode, enter global configuration mode.
    device# configure terminal
    
  2. Enable accounting and send login information to a RADIUS accounting server.
    device(config)# aaa accounting exec default start-stop radius
    
    When this command is entered and a RADIUS server is not configured, an error message is displayed to indicate that no active RADIUS server exists to support accounting.
  3. Return to privileged EXEC mode.
    device(config)# exit
    device#
    
  4. Verify the AAA accounting configuration.
    device# show running-config aaa accounting
    
    aaa accounting exec default start-stop radius
    
    
  5. (Optional) Once enabled, you can disable sending login information to a RADIUS accounting server.

    The following example shows how to disable login accounting by using the no aaa acccounting command.

    device# configure terminal
    device(config)# no aaa accounting exec default start-stop 
    device(config)# exit
    

    The following example shows how to disable login accounting by using the aaa accounting command specifying the none option.

    device# configure terminal
    device(config)# aaa accounting exec default start-stop none
    device(config)# exit
    

Example

The following example shows how to enable login accounting on a RADIUS server and verify the configuration.

device# configure terminal
device(config)# aaa accounting exec default start-stop radius
device(config)# exit
device# show running-config aaa accounting

aaa accounting exec default start-stop radius