Command Default
AAA accounting is disabled.
Command Modes
Global configuration
Command History
ModificationRelease
This command was introduced.Cisco IOS XE 3.3SECisco IOS XE 3.3SE
Usage Guidelines
Use the aaa accounting command to enable accounting and to create named method lists defining specific
accounting methods on a per-line or per-interface basis.
Table 35: AAA accounting Methods
DescriptionKeyword
Uses the list of all RADIUS servers for authentication as defined by the
aaa group server radius command.
group radius
Uses the list of all TACACS+ servers for authentication as defined by the
aaa group server tacacs+ command.
group tacacs+
Uses a subset of RADIUS or TACACS+ servers for accounting as defined
by the server group group-name.
group group-name
In Table 35: AAA accounting Methods, on page 705, the group radius and group tacacs+ methods refer to
a set of previously defined RADIUS or TACACS+ servers. Use the radius-server host and tacacs-server
host commands to configure the host servers. Use the aaa group server radius and aaa group server tacacs+
commands to create a named group of servers.
Cisco IOS software supports the following two methods of accounting:
• RADIUS—The network access server reports user activity to the RADIUS security server in the form
of accounting records. Each accounting record contains accounting attribute-value (AV) pairs and is
stored on the security server.
• TACACS+—The network access server reports user activity to the TACACS+ security server in the
form of accounting records. Each accounting record contains accounting attribute-value (AV) pairs and
is stored on the security server.
Method lists for accounting define the way accounting will be performed. Named accounting method lists
enable you to designate a particular security protocol to be used on specific lines or interfaces for particular
types of accounting services. Create a list by entering the list-name and the method , where list-name is any
character string used to name this list (excluding the names of methods, such as radius or tacacs+) and method
identifies the methods to be tried in sequence as given.
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
705
aaa accounting
To Next Page
Loading...
Need help?
General
