Command Reference, Cisco Ios Xe Everest 16.5.1A (Catalyst 3650 Switches - Cisco Catalyst 3650 series Command Reference Manual

aaa accounting
If the aaa accounting command for a particular accounting type is issued without a named method list
specified, the default method list is automatically applied to all interfaces or lines (where this accounting type
applies) except those that have a named method list explicitly defined. (A defined method list overrides the
default method list.) If no default method list is defined, then no accounting takes place.
System accounting does not use named accounting lists; you can only define the default list for system
Note
accounting.
For minimal accounting, include the stop-only keyword to send a stop record accounting notice at the end
of the requested user process. For more accounting, you can include the start-stop keyword, so that RADIUS
or TACACS+ sends a start accounting notice at the beginning of the requested process and a stop accounting
notice at the end of the process. Accounting is stored only on the RADIUS or TACACS+ server. The none
keyword disables accounting services for the specified line or interface.
When AAA accounting is activated, the network access server monitors either RADIUS accounting attributes
or TACACS+ AV pairs pertinent to the connection, depending on the security method you have implemented.
The network access server reports these attributes as accounting records, which are then stored in an accounting
log on the security server. For a list of supported RADIUS accounting attributes, refer to the appendix RADIUS
Attributes in the Cisco IOS Security Configuration Guide. For a list of supported TACACS+ accounting AV
pairs, refer to the appendix TACACS+ Attribute-Value Pairs in the Cisco IOS Security Configuration Guide.
Note This command cannot be used with TACACS or extended TACACS.
Examples
This example defines a default commands accounting menthod list, where accounting services are provided
by a TACACS+ security server, set for privilege level 15 commands with a stop-only restriction:
Device(config)# aaa accounting commands 15 default stop-only group TACACS+
This example defines a default auth-proxy accounting method list, where accounting services are provided
by a TACACS+ security server with a stop-only restriction. The aaa accounting commands activates
authentication proxy accouting.
Device(config)# aaa new model
Device(config)# aaa authentication login default group TACACS+
Device(config)# aaa authorization auth-proxy default group TACACS+
Device(config)# aaa accounting auth-proxy default start-stop group TACACS+

Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)

706