cisco — Restrictions for Configuring Accounting

Configuring Accounting The AAA accounting feature allows the services that users are accessing and the amount of network resources that users are consuming to be tracked. When AAA accounting is enabled, the network access server reports user activity to the TACACS+ or RADIUS security server (depending on which security method is implemented) in the form of accounting records. Each accounting record contains accounting attribute-value (AV) pairs and is stored on the security server. This data can then be analyzed for network management, client billing, and auditing.

Prerequisites for Configuring Accounting, on page 1 Restrictions for Configuring Accounting, on page 1 Information About Configuring Accounting, on page 2 How to Configure AAA Accounting, on page 15 Configuration Examples for AAA Accounting, on page 22 Additional References for Configuring Accounting, on page 25 Feature History for Configuring Accounting, on page 26 Prerequisites for Configuring Accounting The following tasks must be performed before configuring accounting using named method lists: • Enable AAA on the network access server by using the aaa new-model command in global configuration mode.

• Define the characteristics of the RADIUS or TACACS+ security server if RADIUS or TACACS+ authorization is issued. For more information about configuring the Cisco network access server to communicate with the RADIUS security server, see the Configuring RADIUS module. For more information about configuring the Cisco network access server to communicate with the TACACS+ security server, see the Configuring TACACS+ module. Restrictions for Configuring Accounting • Accounting information can be sent simultaneously to a maximum of only four AAA servers. Configuring Accounting 1