Accounting Configuration Guidelines; Configuring Accounting - Cisco WS-C2948G-GE-TX Configuration Manual

Configuring Accounting

Accounting Configuration Guidelines

This section lists the guidelines for configuring accounting on the switch:
•
•
Note The amount of DRAM that is allocated for one accounting event is approximately 500 bytes. The total
amount of DRAM that is used by accounting depends on the number of concurrent accountable events
occurring in the system.
Configuring Accounting
The next two sections describe how to configure RADIUS and TACACS+ accounting on the switch.
Enabling Accounting
To enable accounting on the switch, perform this task in privileged mode:
Task
Step 1 Enable accounting for connection events.
Step 2 Enable accounting for EXEC mode.
Step 3 Enable accounting for system events.
Step 4
Enable accounting of configuration commands.
Step 5
Enable suppression of information for unknown
users.
Step 6
Configure accounting to be updated as new
information is available.
Step 7
Verify the accounting configuration.
This example shows how to enable stop-only TACACS+ accounting events:
Console> (enable) set accounting connect enable stop-only tacacs+
Accounting set to enable for connect events in stop-only mode.
Console> (enable)
Console> (enable) set accounting exec enable stop-only tacacs+
Accounting set to enable for exec events in stop-only mode.
Console> (enable)
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2948G-GE-TX, and Catalyst 2980G Switches Software Configuration Guide—Release 8.2GLX
30-50
Configure RADIUS and TACACS+ servers before enabling accounting. See the
TACACS+ Servers" section on page 30-17
page 30-23, for more information on server setup.
Configure RADIUS and TACACS+ keys to encrypt protocol packets before enabling accounting.
See the "Specifying the TACACS+ Key" section on page 30-19
Key" section on page 30-25, for more information on the key setup.
Chapter 30 Configuring Switch Access Using AAA
or the "Specifying RADIUS Servers" section on
or the
Command
set accounting connect enable {start-stop |
stop-only} {tacacs+ | radius}
set accounting exec enable {start-stop |
stop-only} {tacacs+ | radius}
set accounting system enable {start-stop |
stop-only} {tacacs+ | radius}
set accounting commands enable {config | all}
{stop-only} tacacs+
set accounting suppress null-username enable
set accounting update {new-info | {periodic
[interval]}}
show accounting
"Specifying
"Specifying the RADIUS
78-15908-01