•
Enable AAA Accounting on page 878
•
Suppress AAA Accounting for null username sessions on page 878
•
Configure Accounting of EXEC and privilege-level command usage on page 879
•
Configure AAA Accounting for terminal lines on page 879
•
Monitor AAA Accounting on page 879
Enable AAA Accounting
The
aaa accounting
monitored. To enable AAA accounting, perform the following task in CONFIGURATION mode:
Command Syntax
{
aaa accounting
system
} {
command level
{
|
start-stop
wait-start
{
}
tacacs+
Suppress AAA Accounting for null username sessions
When AAA Accounting is activated, the FTOS software issues accounting records for all users on the
system, including users whose username string, because of protocol translation, is NULL. An example of
this is a user who comes in on a line where the AAA Authentication
applied. To prevent accounting records from being generated for sessions that do not have usernames
associated with them, perform the following task in
Command Syntax
aaa accounting suppress null-username
878
|
Security
command enables you to create a record for any or all of the accounting functions
Command Mode
|
|
CONFIGURATION
exec
|
}
default
name
|
}
stop-only
Command Mode
CONFIGURATION
(mandatory)
(optional)
(optional)
Purpose
Enable AAA Accounting and create a record for
monitoring the accounting function.
The variables are:
•
—sends accounting information of any
system
other AAA configuration
•
—sends accounting information when a user
exec
has logged in to the EXEC mode
•
command level
executed at the specified privilege level
|
•
default
accounting methods.
•
start-stop—
to send a start-accounting notice at the beginning
of the requested event and a stop-accounting
notice at the end.
•
wait-start—
server acknowledges the start notice before
granting the user's process request
•
stop-only
the TACACS+ server to send a stop record
accounting notice at the end of the requested user
process.
•
—Designate the security service.
tacacs+
Currently, FTOS supports only TACACS+
CONFIGURATION
Purpose
Prevent accounting records from being generated for
users whose username string is NULL
(optional)
(optional)
—sends accounting of commands
—Enter the name of a list of
name
Use for more accounting information,
ensures that the TACACS+ security
—Use for minimal accounting; instructs
command is
login method-list none
mode: