Enabling and disabling login accounting (RADIUS)

Login information can be sent to a Remote Authentication Dial-In User Service (RADIUS) server for accounting purposes.

Before you begin

Before enabling login (EXEC) accounting, at least one RADIUS server host must be configured on the device by using the radius-server host command.

Procedure

  1. From privileged EXEC mode, enter global configuration mode.
    device# configure terminal
    
  2. Enable accounting and send login information to a RADIUS accounting server.
    device(config)# aaa accounting exec default start-stop radius
    
    When this command is entered and a RADIUS server is not configured, an error message is displayed to indicate that no active RADIUS server exists to support accounting.
  3. Return to privileged EXEC mode.
    device(config)# exit
    device#
    
  4. Verify the AAA accounting configuration.
    device# show running-config aaa accounting
    
    aaa accounting exec default start-stop radius
    
    
  5. (Optional) Once enabled, you can disable sending login information to a RADIUS accounting server.

    The following example shows how to disable login accounting by using the no aaa acccounting command.

    device# configure terminal
    device(config)# no aaa accounting exec default start-stop 
    device(config)# exit
    

    The following example shows how to disable login accounting by using the aaa accounting command specifying the none option.

    device# configure terminal
    device(config)# aaa accounting exec default start-stop none
    device(config)# exit
    

Example

The following example shows how to enable login accounting on a RADIUS server and verify the configuration.

device# configure terminal
device(config)# aaa accounting exec default start-stop radius
device(config)# exit
device# show running-config aaa accounting

aaa accounting exec default start-stop radius