Cisco WS-C6506 - Updating the Server; Suppressing Accounting

39-54
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 39 Configuring the Switch Access Using AAA
Understanding How Accounting Works
This example shows how to specify a RADIUS server and verify the configuration:
Console> (enable) set radius server 172.20.52.3
172.20.52.3 with auth-port 1812 added to radius server table as primary server.
Console> (enable) show radius
Login Authentication: Console Session Telnet Session
--------------------- ---------------- ----------------
tacacs disabled disabled
radius disabled disabled
local enabled(primary) enabled(primary)
Enable Authentication: Console Session Telnet Session
---------------------- ----------------- ----------------
tacacs disabled disabled
radius disabled disabled
local enabled(primary) enabled(primary)
Radius Deadtime: 0 minutes
Radius Key:
Radius Retransmit: 2
Radius Timeout: 5 seconds
Radius-Server Status Auth-port
----------------------------- ------- ------------
172.20.52.3 primary 1812
Console> (enable)
Updating the Server
You can configure the switch to send accounting information to the TACACS+ server. There are two
options:
• Newinfo—Sends the accounting information to the server only when new accounting information
becomes available.
• Periodic—Sends the accounting update records at regular intervals. This option could be used to
keep up-to-date connection and session information even if the NAS restarts and loses the initial
start time. You must set a time lapse between periodic updates. Valid intervals are from 1 to
71,582 minutes.
Suppressing Accounting
You can configure the system to suppress accounting when an unknown user with no username accesses
the switch by using the set accounting suppress null-username enable command.
Note RADIUS and TACACS+ accounting are the same, except that RADIUS does not do command
accounting, periodic updates, or allow null-username suppression.