Users Guide

Security Commands 952
• The same list-name can be used for both exec and commands accounting
type
• AAA Accounting for commands with RADIUS as the accounting method
is not supported.
• Start-stop or None are the only supported record types for RADIUS
accounting. Start-stop enables accounting and None disables accounting.
• RADIUS is the only accounting method type supported for 802.1X
accounting.
• For the same set of accounting type and list name, the administrator can
change the record type or the methods list, without having to first delete
the previous configuration.
• Interim accounting is enabled using the aaa accounting update command.
• Use either the aaa accounting dot1x default none or no aaa accounting
dot1x default command to disable dot1x accounting.
• Use the no aaa accounting exec or no aaa accounting commands to
disable aaa accounting and optionally delete an accounting method list.
Example
The following shows several examples of the command.
(console)#configure
(console-config)#aaa accounting commands default stop-only tacacs
(console-config)#aaa accounting exec default start-stop radius
(console-config)#aaa accounting dot1x default start-stop radius
(console-config)#aaa accounting dot1x default none
(console-config)#exit
For the same set of accounting type and list name, the administrator can
change the record type, or the methods list, without having to first delete the
previous configuration. The first aaa command creates a method list for exec
sessions with the name ExecList, with record-type as stop-only and the
method as TACACS+. The second command changes the record type to
start-stop from stop-only for the same method list. The third command for
the list changes the methods list to {tacacs,radius} from {tacacs}.
(console)#configure
(console-config)#aaa accounting exec ExecList stop-only tacacs
(console-config)#aaa accounting exec ExecList start-stop tacacs
(console-config)#aaa accounting exec ExecList start-stop tacacs radius
(console-config)#exit