Table 65: Tacacs+ Accounting Information - Juniper JUNOSE SOFTWARE 11.0.X - BROADBAND ACCESS CONFIGURATION GUIDE 4-1-2010 Configuration Manual

JUNOSe 11.0.x Broadband Access Configuration Guide
The NAS sends TACACS+ accounting packets to the TACACS+ host. The accounting
packets contain data in the packet header, packet body, and attribute-value pairs
(AVPs). Table 65 on page 314 provides descriptions of the TACACS+ accounting data.

Table 65: TACACS+ Accounting Information

314
TACACS+ Overview
Method list A specified configuration that defines how the NAS performs the
AAA accounting service. A service type can be configured with multiple method
lists with different names, and a method list name can be used for different
service types. Initially, no accounting method list is defined; therefore TACACS+
accounting is disabled.
Default method list Configuration used by consoles and lines when no
named method list is assigned. You enable TACACS+ accounting by defining
default accounting method lists for each service type.
Named method list Assigned to a console, specific line, or group of lines;
overrides the default method list.
Service type Specifies the type of information provided by the TACACS+
accounting service:
Exec Provides information about User Exec terminal sessions, such as
telnet, Local Area Transport (LAT), and rlogin, on the NAS.
Commands <0-15> Provides information about User Exec mode CLI
commands for a specified privilege level that are being executed on the NAS.
Each of the sixteen command privilege levels is a separate service type.
Accounting records are generated for commands executed by users, CLI
scripts, and macros.
Accounting mode Specifies the type of accounting records that are recorded
on the TACACS+ server. Accounting records track user actions and resource
usage. You can analyze and use the records for network management, billing,
and auditing purposes.
start-stop A start accounting record is generated just before a process
begins, and a stop accounting record is generated after a process successfully
completes. This mode is supported only for the Exec service type.
stop-only A stop accounting record is generated after a process successfully
completes. This mode is supported only for the Commands service types.
Field/Attribute Location
major_version Packet header
minor_version Packet header
type Packet header
flags Packet body
priv-level Packet body
Description
Major TACACS+ version number
Minor TACACS+ version number
Type of the AAA service: Accounting
Bitmapped flags representing the record type: start
accounting record or stop accounting record
Privilege level of the user executing the Exec session or
CLI command: 0 - 15