Cisco Systems XR Water System User Manual


 
Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software
aaa accounting
SR-3
Cisco IOS XR System Security Command Reference
Use the aaa accounting command to create default or named method lists defining specific accounting
methods and that can be used on a per-line or per-interface basis. You can specify up to four methods in
the method list. The list name can be applied to a line (console, aux, or vty template) to enable
accounting on that particular line.
The Cisco IOS XR software supports both TACACS+ and RADIUS methods for accounting. The router
reports user activity to the security server in the form of accounting records, which are stored on the
security server.
Method lists for accounting define the way accounting is performed, enabling you to designate a
particular security protocol to be used on specific lines or interfaces for particular types of accounting
services.
For minimal accounting, include the stop-only keyword to send a “stop accounting” notice after the
requested user process. For more accounting, you can include the start-stop keyword, so that TACACS+
or RADIUS sends a “start accounting” notice at the beginning of the requested process and a “stop
accounting” notice after the process. The accounting record is stored only on the TACACS+ or RADIUS
server.
The requested user process begins regardless of whether the “start accounting” notice was received by
the accounting server.
Note This command cannot be used with TACACS or extended TACACS.
Task ID
Examples The following example shows how to define a default commands accounting method list, where
accounting services are provided by a TACACS+ security server, with a stop-only restriction:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# aaa accounting commands default stop-only group tacacs+
Related Commands
Task ID Operations
aaa read, write
Command Description
aaa authorization Creates a method list to be used for authorization.