10.3.5 Configuring login/logout accounting with RADIUS/TACACS+

<Structure of this section>

(1) Sample Configuration for Login/Logout Accounting with RADIUS Servers

Points to note: The example below shows how to configure RADIUS login-logout accounting. Before you begin, complete the setup on the RADIUS server host to which the accounting records will be sent.

Command examples

(config)# radius-server host 192.168.10.1 key "RaD#001"

Configures the RADIUS server as a prerequisite step.
(config)# aaa accounting exec default start-stop group radius

Configures login-logout accounting.

Notes: If you set aaa accounting exec without first executing the radius-server configuration command, the operation log entry System accounting failed will appear whenever a user logs in or logs out. Make sure that you configure the destination RADIUS server first.

(2) Sample Configuration for Login/Logout Accounting with TACACS + Server

Points to note: The example below shows how to configure TACACS+ login-logout accounting. Before you begin, complete the setup on the TACACS+ server host to which the accounting records will be sent.

Command examples

(config)# tacacs-server host 192.168.10.1 key "TaC#001"

Configures the TACACS+ server as a prerequisite step.
(config)# aaa accounting exec default start-stop group tacacs+

Configures login-logout accounting.

Notes: If you set aaa accounting exec without first executing the tacacs-server configuration command, the operation log entry System accounting failed will appear whenever a user logs in or logs out. Make sure that you configure the destination TACACS+ server first.