|
This chapter describes the function and displays the syntax for accounting commands. For more information about defaults and usage guidelines, see the corresponding chapter of the Security Command Reference.
To enable AAA accounting of requested services for billing or security purposes when you use RADIUS or TACACS+, use the aaa accounting global configuration command. Use the no form of this command to disable accounting.
aaa accounting {system | network | exec | command level} {start-stop |system | Performs accounting for all system-level events not associated with users, such as reloads. |
network | Runs accounting for all network-related service requests, including SLIP, PPP, PPP NCPs, and ARAP. |
exec | Runs accounting for EXEC session (user shells). This keyword might return user profile information such as autocommand information. |
command | Runs accounting for all commands at the specified privilege level. |
level | Specifies the command level to track for accounting. Valid entries are 0 through 15. |
start-stop | Sends a start accounting notice at the beginning of a process and a stop accounting notice at the end of a process. The start accounting record is sent in the background. The requested user process begins regardless of whether or not the start accounting notice was received by the accounting server. |
wait-start | As in start-stop, sends both a start and a stop accounting notice to the accounting server. However, if you use the wait-start keyword, the requested user service does not begin until the start accounting notice is acknowledged. A stop accounting notice is also sent. |
stop-only | Sends a stop accounting notice at the end of the requested user process. |
tacacs+ | Enables the TACACS-style accounting. |
radius | Enables the RADIUS-style authorization. |
To prevent the Cisco IOS software from sending accounting records for users whose username string is NULL, use the aaa accounting suppress null-username global configuration command. Use the no form of this command to disable this feature.
aaa accounting suppress null-usernameTo enable periodic interim accounting records to be sent to the accounting server, use the aaa accounting update global configuration command. Use the no form of this command to disable this feature.
aaa accounting update {newinfo | periodic number}newinfo | Causes an interim accounting record to be sent to the accounting server whenever there is new accounting information to report relating to the user in question. |
periodic | Causes an interim accounting record to be sent to the accounting server periodically, as defined by the argument number. |
number | Integer specifying number of minutes. |
Use the show accounting command to step through all active sessions and to print all the accounting records for actively accounted functions. Use the no form of this command to disable this function.
show accounting {system | network | exec | command level} {start-stop |system | Displays accounting for all system-level events not associated with users, such as reloads. |
network | Displays accounting for all network-related service requests, including SLIP, PPP, PPP NCPs, and ARAP. |
exec | Displays accounting for EXEC session (user shells). This keyword might return user profile information such as autocommand information. |
command | Displays accounting for all commands at the specified privilege level. |
level | Specifies the command level to display. Valid entries are 0 through 15. |
start-stop | Displays a start record accounting notice at the beginning of a process and a stop record at the end of a process. The start accounting record is sent in the background. The requested user process begins regardless of whether or not the start accounting record was received by the accounting server. |
wait-start | Displays both a start and a stop accounting notice to the accounting server. |
stop-only | Displays a stop record accounting notice at the end of the requested user process. |
tacacs+ | Displays the TACACS-style accounting. |
|