Access Security Guide K/KA/KB.15.15

Accounting Controls
These options are enabled separately, and define how the switch will send accounting data to a
RADIUS server:
Start-Stop
Applies to the exec, network, and system accounting service types:
Send a "start record accounting" notice at the beginning of the accounting session and
a "stop record notice" at the end of the session. Both notices include the latest data the
switch has collected for the requested accounting type.
Do not wait for an acknowledgement.
Stop-Only
Applies to the network, exec, system, and command service types, as described below:
Send a stop record accounting notice at the end of the accounting session. The notice
includes the latest data the switch has collected for the requested accounting type
(network, exec, or system service types). For the commandsservice type, sends the
"Stop" accounting notice after execution of each CLI command.
Do not wait for an acknowledgment.
Interim-Update
Applies only to the command service type, and is intended for use when the optional common
session ID is configured. Enabling interim-update in this case results in the command
accounting records appearing as enclosed sub-parts of the exec service type record for a
given management session. Using interim-update when the unique session ID is configured
has no effect because in this case, the different service types appear as separate accounting
processes with separate Acct-Session-ID values.
NOTE: Configuring interim-update for Command accounting results in all commands being
reported as "update" records, regardless of whether common or unique is configured for the
accounting session ID, see “Reconfiguring the Acct-Session-ID operation (Optional) ” (page 159).
Example
To configure RADIUS accounting on the switch with start-stop for Exec functions, stop-only for system
functions, and interim-update for commands functions.
This example continues from Figure 117 (page 161), where the session ID was configured as
common.
Figure 117 Example of configuring accounting types and controls
Example
If the switch is configured with RADIUS accounting on the switch to use start-stop for Exec, System,
and Command functions, as shown in Figure 118 (page 162), there will be an "Accounting-On"
Configuring 161