198
C
12: U
S
A
HAPTER
SING
ECURITY AND
CCOUNTING
Enabling and
RADIUS accounting is enabled by default. It can be enabled or disabled
Disabling RADIUS
from the CLI.
Accounting
To enable RADIUS accounting, use the following CLI command:
enable accounting
To disable RADIUS accounting, use the following CLI command:
disable accounting
SYSLOG accounting is always enabled as long as a SYSLOG sink is
defined.
Below are some examples of RADIUS accounting output. The first
describes a login user who has just begun a session.
Thurs Jan 16 22:00:55 1999
Acct-Session-ID="06000003"
User-Name=cindyg
Acct-Status-Type=Start
Acct-Authentic=RADIUS
User-Service-Type=Login-User
Login-Host=NY_Sales
Login-Service=Telnet
When the user above ends the session with the host, a record similar to
the one below is sent to the accounting server:
Thurs Jan 16 23:15:31 1999
Acct-Session-Id="06000003"
User-Name=cindyg
Acct-Status-Type=Stop
Acct-Authentic=RADIUS
Acct-Session-Time=4476
User-Service-Type=Login-User
Login-Host=NY_Sales
Login-Service=Telnet
Acct-Delay-Time=0