Aaa Accounting System Default Start-Stop Group Radius - Cisco Catalyst 4500 Series Command Reference Manual

Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches

aaa accounting system default start-stop group radius

To receive the session termination messages after the switch reboots, use the aaa accounting system
default start-stop group radius command. To disable accounting, use the no form of this command.
Syntax Description
This command has no arguments or keywords.
Defaults Accounting is disabled.
Command Modes Global configuration mode
Command History Release
12.2(18)EW
Usage Guidelines 802.1X accounting requires the RADIUS server.
This command enables the AAA client's accounting feature to forward 802.1X update and watchdog
packets from the 802.1X supplicant (workstation client) to the authentication (RADIUS) server.
(Watchdog packets are defined as EAPOL-LOGON, EAPOL-LOGOFF, and EAPOL-INTERIM
messages.) Successful authentication and authorization of the supplicant by the authentication server is
required before these packets are considered valid and are forwarded. When the client is reauthenticated,
an interim-update accounting notice is sent to the accounting server.
Examples
This example shows how to generate a logoff after a switch reboots:
Switch(config)# aaa accounting system default start-stop group radius
The RADIUS authentication server must be properly configured to accept and log update or watchdog
Note
packets from the AAA client.
Related Commands Command
aaa accounting dot1x default
start-stop group radius
OL-25342 -01
aaa accounting system default start-stop group radius
no aaa accounting system default start-stop group radius
Modification
Support for this command was introduced on the Catalyst 4500 series switch.
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.3.0SG and IOS 15.1(1)SG)
aaa accounting system default start-stop group radius
Description
Enables accounting for 802.1X authentication sessions.
2-5