Understanding the network.pdf - Back to Home

pairs (similar to those used to create user profiles). Here is an
example of a RADIUS exec accounting record:
Wed Jun 9 12:27:09 1999
NAS-IP-Address = 192.168.17.1
NAS-Port = 2
NAS-Port-Type = Virtual
User-Name = RAD-USER
Called-Station-Id =
Calling-Station-Id = 192.168.17.1
Acct-Status-Type = Stop
Acct-Authentic = RADIUS
Service-Type = Shell-User
Acct-Session-Id = 00000005
Acct-Terminate-Cause = Idle-Timeout
Acct-Session-Time = 601
Acct-Delay-Time = 0
In order to get accounting started, you need to be using security and have TACACS+ or RADIUS configured on the
client (router) and server ends. Accounting is configured using
variations of the command .
If you are using RADIUS, you can only collect accounting information
for network, outbound connections, and EXEC sessions, providing
essentially only user accounting information. If you need to collect
"system accounting" information about the router, you will have to
use TACACS+. This provides support for collecting accounting
information about the router using the and
options.
local-AS(config)#aaa accounting network start-stop radius
local-AS(config)#aaa accounting command start-stop radius
local-AS(config)#aaa accounting exec start-stop radius
local-AS(config)#aaa accounting system start-stop tacacs+
local-AS(config)#aaa accounting commands start-stop tacacs+