10.3.5 Configuring login/logout accounting with RADIUS/TACACS+
- <Structure of this section>
(1) Sample Configuration for Login/Logout Accounting with RADIUS Servers
- Points to note
-
The example below shows how to configure RADIUS login-logout accounting. Before you begin, complete the setup on the RADIUS server host to which the accounting records will be sent.
Command examples
-
(config)# radius-server host 192.168.10.1 key "RaD#001"
Configures the RADIUS server as a prerequisite step.
-
(config)# aaa accounting exec default start-stop group radius
Configures login-logout accounting.
- Notes
-
If you set aaa accounting exec without first executing the radius-server configuration command, the operation log entry System accounting failed will appear whenever a user logs in or logs out. Make sure that you configure the destination RADIUS server first.
(2) Sample Configuration for Login/Logout Accounting with TACACS + Server
- Points to note
-
The example below shows how to configure TACACS+ login-logout accounting. Before you begin, complete the setup on the TACACS+ server host to which the accounting records will be sent.
Command examples
-
(config)# tacacs-server host 192.168.10.1 key "TaC#001"
Configures the TACACS+ server as a prerequisite step.
-
(config)# aaa accounting exec default start-stop group tacacs+
Configures login-logout accounting.
- Notes
-
If you set aaa accounting exec without first executing the tacacs-server configuration command, the operation log entry System accounting failed will appear whenever a user logs in or logs out. Make sure that you configure the destination TACACS+ server first.