Installation guide

Enhancements

Release Y.11.16 Enhancements

Configuring RADIUS Accounting

Note

This section assumes you have already:

■ Configured RADIUS authentication on the switch for one or more access methods

■ Configured one or more RADIUS servers to support the switch

Steps for Configuring RADIUS Accounting

1. Configure the switch for accessing a RADIUS server.

You can configure a list of up to three RADIUS servers (one primary, two backup). The switch

operates on the assumption that a server can operate in both accounting and authentication

mode. (Refer to the documentation for your RADIUS server application.)

• Use the same radius-server host command that you would use to configure RADIUS

authentication.

• Provide the following:

– A RADIUS server IP address.

– Optional—a UDP destination port for authentication requests. Otherwise the switch

assigns the default UDP port (1812; recommended).

RADIUS Accounting Commands Page

[no] radius-server host < ip-address > 27

[acct-port < port-number >] 27

[key < key-string >] 27

[no] aaa accounting < exec | network | system > < start-stop | stop-only> radius

[no] aaa accounting commands < stop-only | interim-update > radius

aaa accounting session-id < unique | common >

[no] aaa accounting update

periodic < 1 - 525600 > (in minutes)

[no] aaa accounting suppress null-username 33

show accounting 38

show accounting sessions 39

show radius accounting 38