Information About Configuring Accounting Named Method Lists for Accounting Similar to authentication and authorization method lists, method lists for accounting define the way accounting is performed and the sequence in which these methods are performed. Named accounting method lists allow particular security protocol to be designated and used on specific lines or interfaces for accounting services. The only exception is the default method list (which is named default). The default method list is automatically applied to all interfaces except those that have a named method list explicitly defined. A defined method list overrides the default method list.
A method list is simply a named list describing the accounting methods to be queried (such as RADIUS or TACACS+), in sequence. Method lists allow one or more security protocols to be designated and used for accounting, thus ensuring a backup system for accounting in case the initial method fails. Cisco IOS software uses the first method listed to support accounting; if that method fails to respond, the Cisco IOS software selects the next accounting method listed in the method list. This process continues until there is successful communication with a listed accounting method, or all methods defined are exhausted.
Note The Cisco IOS software attempts accounting with the next listed accounting method only when there is no response from the previous method. If accounting fails at any point in this cycle--meaning that the security server responds by denying the user access--the accounting process stops and no other accounting methods are attempted. Accounting method lists are specific to the type of accounting being requested. AAA supports seven different types of accounting: Network : Provides information for all PPP, SLIP, or ARAP sessions, including packet and byte counts. EXEC : Provides information about user EXEC terminal sessions of the network access server. Commands :
Provides information about the EXEC mode commands that a user issues. Command accounting generates accounting records for all EXEC mode commands, including global configuration commands, associated with a specific privilege level. Connection : Provides information about all outbound connections made from the network access server, such as Telnet, local-area transport (LAT), TN3270, packet assembler/disassembler (PAD), and rlogin. System : Provides information about system-level events. Resource : Provides “start” and “stop” records for calls that have passed user authentication, and provides “stop” records for calls that fail to authenticate. VRRS :
Provides information about Virtual Router Redundancy Service (VRRS). System accounting does not use named accounting lists; only the default list for system accounting can be defined. Note Configuring Accounting Information About Configuring Accounting Configuring Accounting 2