Use this command in Global Config mode to create an accounting method list for user EXEC sessions, user-executed commands, or DOT1X. This list is identified by default or a user-specified list_name. Accounting records, when enabled for a line-mode, can be sent at both the beginning and at the end (start-stop) or only at the end (stop-only). If none is specified, then accounting is disabled for the specified list. If tacacs is specified as the accounting method, accounting records are notified to a TACACS+ server. If radius is the specified accounting method, accounting records are notified to a RADIUS server.
Note the following:
- A maximum of five Accounting Method lists can be created for each exec and commands type.
- Only the default Accounting Method list can be created for DOT1X. There is no provision to create more.
- The same list-name can be used for both exec and commands accounting type
- AAA Accounting for commands with RADIUS as the accounting method is not supported.
- Start-stop or None are the only supported record types for DOT1X accounting. Start-stop enables accounting and None disables accounting.
- RADIUS is the only accounting method type supported for DOT1X accounting.
| Format | aaa accounting {exec | commands | dot1x} {default | list_name} {start-stop | stop-only | none} method1 [method2…] |
| Mode | Global Config |
| Parameter | Description |
|---|---|
| exec | Provides accounting for a user EXEC terminal sessions. |
| commands | Provides accounting for all user executed commands. |
| dot1x | Provides accounting for DOT1X user commands. |
| default | The default list of methods for accounting services. |
| list-name | Character string used to name the list of accounting methods. |
| start-stop | Sends a start accounting notice at the beginning of a process and a stop accounting notice at the beginning of a process and a stop accounting notice at the end of a process. |
| stop-only | Sends a stop accounting notice at the end of the requested user process. |
| none | Disables accounting services on this line. |
| method | Use either TACACS or radius server for accounting purposes. |
Example: The following shows an example of the command.
(Routing) # (Routing) #configure (Routing) #aaa accounting commands default stop-only tacacs (Routing) #aaa accounting exec default start-stop radius (Routing) #aaa accounting dot1x default start-stop radius (Routing) #aaa accounting dot1x default none (Routing) #exit
For the same set of accounting type and list name, the administrator can change the record type, or the methods list, without having to first delete the previous configuration.
(Routing) # (Routing) #configure (Routing) #aaa accounting exec ExecList stop-only tacacs (Routing) #aaa accounting exec ExecList start-stop tacacs (Routing) #aaa accounting exec ExecList start-stop tacacs radius
The first aaa command creates a method list for exec sessions with the name ExecList, with record-type as stop-onlyand the method as TACACS+. The second command changes the record type to start-stop from stop-only for the same method list. The third command, for the same list changes the methods list to {tacacs,radius} from {tacacs}.
