Administrator Guide

Authentication, Authorization, and Accounting 277
Accounting
Accounting is used to record security events, such as a user logging in or
executing a command. Accounting records may be sent upon completion of
an event (stop-only) or at both the beginning and end of an event (start-
stop). There are three types of accounting: commands, Dot1x, and exec.
• Commands —Sends accounting records for command execution.
•
Dot1x —Sends accounting records for network access.
•
Exec —Sends accounting records for management access (logins).
For more information about the data sent in accounting records, see "Which
RADIUS Attributes Does the Switch Support? " on page 243 and "Using
TACACS+ Servers to Control Management Access " on page 246.
Table 10-10 shows the valid methods for each type of accounting:
RADIUS Accounting
Dell Networking N-Series switches support RADIUS accounting. The
supported accounting types are start-only or start-stop.
The following attributes are sent in the Accounting Stop record that is sent to
the RADIUS server when the switch is configured for 802.1X accounting:
•User-Name (1)
• Called-Station-Id (30)
• Calling-Station-Id (31)
• NAS-Port-Type (61)
• State (24)
• Acct-Terminate-Cause(49)
• NAS-IP-Address(4)
•Class (25)
Table 10-10. Accounting Methods
Method Commands Dot1x Exec
radius no yes yes
tacacs yes no yes