Accounting Using A Radius Server; Radius Workflow - Cisco 350XG series Administration Manual

Security
Configuring RADIUS
STEP 1
STEP 2
NOTE
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
• Authentication—Provides authentication of regular and 802.1X users
logging onto the device by using usernames and user-defined passwords.
• Authorization—Performed at login. After the authentication session is
completed, an authorization session starts using the authenticated
username. The RADIUS server then checks user privileges.
• Accounting—Enable accounting of login sessions using the RADIUS server.
This enables a system administrator to generate accounting reports from
the RADIUS server.

Accounting Using a RADIUS Server

The user can enable accounting of login sessions using a RADIUS server.
The user-configurable, TCP port used for RADIUS server accounting is the same
TCP port that is used for RADIUS server authentication and authorization.
Defaults
The following defaults are relevant to this feature:
• No default RADIUS server is defined by default.
• If you configure a RADIUS server, the accounting feature is disabled by
default.
Interactions With Other Features
You cannot enable accounting on both a RADIUS and TACACS+ server.

Radius Workflow

To user a RADIUS server, do the following:
Open an account for the device on the RADIUS server.
Configure that server along with the other parameters in the RADIUS and ADD
RADIUS Server pages.
If more than one RADIUS server has been configured, the device uses the
configured priorities of the available RADIUS servers to select the RADIUS server
to be used by the device.
19
395