Example: Configuring AAA Resource Accounting The following example shows how to configure the resource failure stop accounting and resource accounting for start-stop records functions: !Enable AAA on your network access server. Device(config)# aaa new-model !Enable authentication at login and list the AOL string name to use for login authentication. Device(config)# aaa authentication login AOL group radius local !Enable authentication for ppp and list the default method to use for PPP authentication. Device(config)# aaa authentication ppp default group radius local !Enable authorization for all exec sessions and list the AOL string name to use for authorization.
Device(config)# aaa authorization exec AOL group radius if-authenticated !Enable authorization for all network-related service requests and list the default method to use for all network-related authorizations. Device(config)# aaa authorization network default group radius if-authenticated !Enable accounting for all exec sessions and list the default method to use for all start-stop accounting services. Device(config)# aaa accounting exec default start-stop group radius !Enable accounting for all network-related service requests and list the default method to use for all start-stop accounting services.
Device(config)# aaa accounting network default start-stop group radius !Enable failure stop accounting. Device(config)# aaa accounting resource default stop-failure group radius !Enable resource accounting for start-stop records. Device(config)# aaa accounting resource default start-stop group radius Example: Configuring AAA Broadcast Accounting The following example shows how to turn on broadcast accounting using the global aaa accounting command:
Device> enable Device# configure terminal Device(config)# aaa group server radius isp Device(config-sg-radius)# server 10.0.0.1 Device(config-sg-radius)# server 10.0.0.2 Device(config-sg-radius)# exit Device(config)# aaa group server tacacs+ isp_customer Device config-sg-tacacs+)# server 172.0.0.1 Device config-sg-tacacs+)# exit Configuring Accounting Example: Configuring AAA Resource Accounting Field Description User User’s ID. Priv User’s privilege level. Task ID Unique identifier for each accounting session. Accounting Record Type of accounting session. Elapsed Length of time (hh:mm:ss) for this session type. attribute=value AV pairs associated with this accounting session.
Configuring Accounting 24