Table 65: Tacacs+ Accounting Information - Juniper JUNOSE SOFTWARE 11.2.X - BROADBAND ACCESS CONFIGURATION GUIDE 7-20-2010 Configuration Manual

JunosE 11.2.x Broadband Access Configuration Guide
314
Named method list—Assigned to a console, specific line, or group of lines; overrides
the default method list.
Service type—Specifies the type of information provided by the TACACS+ accounting
service:
Exec—Provides information about User Exec terminal sessions, such as telnet, Local
Area Transport (LAT), and rlogin, on the NAS.
Commands <0-15>—Provides information about User Exec mode CLI commands
for a specified privilege level that are being executed on the NAS. Each of the sixteen
command privilege levels is a separate service type. Accounting records are generated
for commands executed by users, CLI scripts, and macros.
Accounting mode—Specifies the type of accounting records that are recorded on the
TACACS+ server. Accounting records track user actions and resource usage. You can
analyze and use the records for network management, billing, and auditing purposes.
start-stop—A start accounting record is generated just before a process begins, and
a stop accounting record is generated after a process successfully completes. This
mode is supported only for the Exec service type.
stop-only—A stop accounting record is generated after a process successfully
completes. This mode is supported only for the Commands service types.
The NAS sends TACACS+ accounting packets to the TACACS+ host. The accounting
packets contain data in the packet header, packet body, and attribute-value pairs (AVPs).
Table 65 on page 314 provides descriptions of the TACACS+ accounting data.

Table 65: TACACS+ Accounting Information

Field/Attribute Location
major_version Packet header
minor_version Packet header
type Packet header
flags Packet body
priv-level Packet body
user Packet body
port Packet body
rem-addr Packet body
service AVP
Description
Major TACACS+ version number
Minor TACACS+ version number
Type of the AAA service: Accounting
Bitmapped flags representing the record type: start
accounting record or stop accounting record
Privilege level of the user executing the Exec session or
CLI command: 0 - 15
Name of user running the Exec session or CLI command
NAS port used by the Exec session or CLI command
User's remote location; either an IP address or the caller
ID
User's primary service: Shell
Copyright © 2010, Juniper Networks, Inc.