cisco — Additional References for Configuring Accounting

Device(config)# aaa accounting network default start-stop broadcast group isp group isp_customer Device(config)# tacacs server server1 Device(config-server-tacacs)# address ipv4 172.0.0.1 Device(config-server-tacacs)# key key2 Device(config-server-tacacs)# end The broadcast keyword causes “start” and “stop” accounting records for network connections to be sent simultaneously to server 10.0.0.1 in the group isp and to server 172.0.0.1 in the group isp_customer. If server 10.0.0.1 is unavailable, failover to server 10.0.0.2 occurs. If server 172.0.0.1 is unavailable, no failover occurs because backup servers are not configured for the group isp_customer. Example:

Configuring per-DNIS AAA Broadcast Accounting The following example shows how to turn on per-DNIS broadcast accounting using the global aaa dnis map accounting network command:

Device> enable Device# configure terminal Device(config)# aaa group server radius isp Device(config-sg-radius)# server 10.0.0.1 Device(config-sg-radius)# server 10.0.0.2 Device(config-sg-radius)# exit Device(config)# aaa group server tacacs+ isp_customer Device config-sg-tacacs+)# server 172.0.0.1 Device config-sg-tacacs+)# exit Device(config)# aaa dnis map enable Device(config)# aaa dnis map 7777 accounting network start-stop broadcast group isp group isp_customer Device(config)# tacacs server server1 Device(config-server-tacacs)# address ipv4 172.0.0.1 Device(config-server-tacacs)# key key_2 Device(config-server-tacacs)# end The broadcast keyword causes “start” and “stop” accounting records for network connection calls having DNIS number 7777 to be sent simultaneously to server 10.0.0.1 in the group isp and to server 172.0.0.1 in the group isp_customer.

If server 10.0.0.1 is unavailable, failover to server 10.0.0.2 occurs. If server 172.0.0.1 is unavailable, no failover occurs because backup servers are not configured for the group isp_customer. Example: AAA Session MIB The following example shows how to set up the AAA session MIB feature to disconnect authenticated client connections for PPP users:

Device> enable Device# configure terminal Device(config)# aaa new-model Device(config)# aaa authentication ppp default group radius Device(config)# aaa authorization network default group radius Device(config)# aaa accounting network default start-stop group radius Device(config)# aaa session-mib disconnect Device(config)# end Additional References for Configuring Accounting The following sections provide references related to the Configuring Accounting feature. Configuring Accounting Example: Configuring per-DNIS AAA Broadcast Accounting Configuring Accounting 25