Generating Accounting Records for a Failed Login or Session When AAA accounting is activated, the Cisco IOS XE software does not generate accounting records for system users who fail login authentication, or who succeed in login authentication but fail PPP negotiation for some reason. To specify that accounting stop records be generated for users who fail to authenticate at login or during session negotiation, use the following command in global configuration mode: Specifying Accounting NETWORK-Stop Records Before EXEC-Stop Records For PPP users who start EXEC terminal sessions, it can be specified that NETWORK records be generated before EXEC-stop records.
In some cases, such as billing customers for specific services, is can be desirable to keep network start and stop records together, essentially “nesting” them within the framework of the EXEC start and stop messages. For example, a user dialing in using PPP can create the following records: EXEC-start, NETWORK-start, EXEC-stop, NETWORK-stop. By nesting the network accounting records, NETWORK-stop records follow NETWORK-start messages: EXEC-start, NETWORK-start, NETWORK-stop, EXEC-stop. To nest accounting records for user sessions, use the following command in global configuration mode:
Suppressing System Accounting Records over Switchover To suppress the system accounting-on and accounting-off messages during switchover, use the following command in global configuration mode: Configuring AAA Resource Failure Stop Accounting To enable resource failure stop accounting, use the following command in global configuration mode: Configuring Accounting Generating Accounting Records for a Failed Login or Session Command or Action Purpose Step 4 end Example: Device(config)# end Exits global configuration mode and returns to privileged EXEC mode.
Command or Action Purpose aaa accounting send stop-record authentication failure Generates “stop” records for users who fail to authenticate at login or during session negotiation using PPP. Command or Action Purpose aaa accounting nested Nests network accounting records. Command or Action Purpose aaa accounting redundancy suppress system-records Suppresses the system accounting messages during switchover. Configuring Accounting 19