Setup Guide

accounting commands 15 com15
accounting exec execAcct
Example of Enabling AAA Accounting with a Named Method List
Dell(config-line-vty)# accounting commands 15 com15
Dell(config-line-vty)# accounting exec execAcct
Monitoring AAA Accounting
The system does not support periodic interim accounting because the periodic command can cause heavy congestion when many
users are logged in to the network.
No specic show command exists for TACACS+ accounting.
To obtain accounting records displaying information about users currently logged in, use the following command.
• Step through all active sessions and print all the accounting records for the actively accounted functions.
CONFIGURATION mode or EXEC Privilege mode
show accounting
Example of the show accounting Command for AAA Accounting
Dell#show accounting
Active accounted actions on tty2, User admin Priv 1
Task ID 1, EXEC Accounting record, 00:00:39 Elapsed, service=shell
Active accounted actions on tty3, User admin Priv 1
Task ID 2, EXEC Accounting record, 00:00:26 Elapsed, service=shell
Dell#
RADIUS Accounting
Dell EMC Networking OS supports Remote Authentication Dial In User Service (RADIUS) protocol to transmit the RADIUS accounting
messages between a Network Access Server (NAS) and an accounting server.
NAS reports the user activity to the accounting server (RADIUS or TACACS+) with accounting records. The RADIUS accounting server
stores the accounting records, which is used for network management, auditing, etc.
Dell EMC Networking OS complies with RFC2866 for RADIUS Accounting.
NAS receives the accounting request from the supplicant and sends the RADIUS request packet to the accounting server after successful
authentication. The RADIUS Accounting request contains a RADIUS Acct-Status-Type as Start or Stop to update the supplicant session
to the accounting server.
NOTE
: In RADIUS accounting, fallback behavior among RADIUS and TACACS servers is not supported as the RADIUS
accounting feature is not available in Dell EMC Networking OS version earlier than 9.14.1.5.
In VLT domain, the NAS sends the RADIUS Accounting Request packets only if the NAS is
congured as a VLT primary peer.
Congure RADIUS Accounting
The NAS monitors the accounting functions dened in the RADIUS Accounting attribute/value (AV) pairs.
• Congure AAA accounting to monitor accounting functions dened in RADIUS.
CONFIGURATION mode
aaa accounting {dot1x | exec} default {start-stop | wait-start | stop-only} radius
910
Security