Administrator Guide

Configuring AAA Accounting for Terminal Lines
To enable AAA accounting with a named method list for a specific terminal line (where com15 and execAcct are the method list
names), use the following commands.
● Configure AAA accounting for terminal lines.
CONFIG-LINE-VTY mode
accounting commands 15 com15
accounting exec execAcct
Dell(config-line-vty)# accounting commands 15 com15
Dell(config-line-vty)# accounting exec execAcct
Monitoring AAA Accounting
The system does not support periodic interim accounting because the periodic command can cause heavy congestion when
many users are logged in to the network.
No specific show command exists for TACACS+ accounting.
To obtain accounting records displaying information about users currently logged in, use the following command.
● Step through all active sessions and print all the accounting records for the actively accounted functions.
CONFIGURATION mode or EXEC Privilege mode
show accounting
Dell#show accounting
Active accounted actions on tty2, User admin Priv 1
Task ID 1, EXEC Accounting record, 00:00:39 Elapsed, service=shell
Active accounted actions on tty3, User admin Priv 1
Task ID 2, EXEC Accounting record, 00:00:26 Elapsed, service=shell
Dell#
RADIUS Accounting
Dell EMC Networking OS supports Remote Authentication Dial In User Service (RADIUS) protocol to transmit the RADIUS
accounting messages between a Network Access Server (NAS) and an accounting server.
NAS reports the user activity to the accounting server (RADIUS or TACACS+) with accounting records. The RADIUS accounting
server stores the accounting records, which is used for network management, auditing, etc.
Dell EMC Networking OS complies with RFC2866 for RADIUS Accounting.
NAS receives the accounting request from the supplicant and sends the RADIUS request packet to the accounting server after
successful authentication. The RADIUS Accounting request contains a RADIUS Acct-Status-Type as Start or Stop to update
the supplicant session to the accounting server.
NOTE:
In RADIUS accounting, fallback behavior among RADIUS and TACACS servers is not supported as the RADIUS
accounting feature is not available in Dell EMC Networking OS version earlier than 9.14.1.5.
In VLT domain, the NAS sends the RADIUS Accounting Request packets only if the NAS is configured as a VLT primary peer.
Configure RADIUS Accounting
The NAS monitors the accounting functions defined in the RADIUS Accounting attribute/value (AV) pairs.
● Configure AAA accounting to monitor accounting functions defined in RADIUS.
CONFIGURATION mode
aaa accounting {dot1x | exec} default {start-stop | wait-start | stop-only} radius
842
Security