aaa accounting
To create a method list for accounting, use the aaa accounting command in the XR EXEC mode. To remove a list name from the system, use the no form of this command.
aaa accounting {commands | exec | mobile | network | subscriber | system } {default | list-name} {start-stop | stop-only} {none | method}
no aaa accounting {commands | exec | mobile | network} {default | list-name}
Syntax Description
commands |
Enables accounting for XR EXEC shell commands. |
exec |
Enables accounting of a XR EXEC session. |
mobile |
Enables Mobile IP related accounting events. |
network |
Enables accounting for all network-related service requests, such as Internet Key Exchange (IKE) and Point-to-Point Protocol (PPP). |
subscriber |
Sets accounting lists for subscribers. |
system |
Enables accounting for all system-related events. |
event manager |
Sets the authorization list for XR EXEC. |
default |
Uses the listed accounting methods that follow this keyword as the default list of methods for accounting services. |
list-name |
Character string used to name the accounting method list. |
start-stop |
Sends a “start accounting” notice at the beginning of a process and a “stop accounting” notice at the end of a process. The requested user process begins regardless of whether the “start accounting” notice was received by the accounting server. |
stop-only |
Sends a “stop accounting” notice at the end of the requested user process. Note: This is not supported with system accounting. |
none |
Uses no accounting. |
method |
Method used to enable AAA system accounting. The value is one of the following options:
|
Command Default
AAA accounting is disabled.
Command Modes
XR EXEC modeCommand History
Release |
Modification |
---|---|
Release 6.0 |
This command was introduced. |
Usage Guidelines
Use the aaa accounting command to create default or named method lists defining specific accounting methods and that can be used on a per-line or per-interface basis. You can specify up to four methods in the method list. The list name can be applied to a line (console, aux, or vty template) to enable accounting on that particular line.
The Cisco IOS XR software supports both TACACS+ and RADIUS methods for accounting. The router reports user activity to the security server in the form of accounting records, which are stored on the security server.
Method lists for accounting define the way accounting is performed, enabling you to designate a particular security protocol that is used on specific lines or interfaces for particular types of accounting services.
For minimal accounting, include the stop-only keyword to send a “stop accounting” notice after the requested user process. For more accounting, you can include the start-stop keyword, so that TACACS+ or RADIUS sends a “start accounting” notice at the beginning of the requested process and a “stop accounting” notice after the process. The accounting record is stored only on the TACACS+ or RADIUS server.
The requested user process begins regardless of whether the “start accounting” notice was received by the accounting server.
Note |
This command cannot be used with TACACS or extended TACACS. |
Task ID
Task ID |
Operations |
---|---|
aaa |
read, write |
Examples
The following example shows how to define a default commands accounting method list, where accounting services are provided by a TACACS+ security server, with a stop-only restriction:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# aaa accounting commands default stop-only group tacacs+