CLI Guide

Security Commands 926
User Guidelines
An accounting list is identified by the default keyword or a user-specified
list_name. Accounting records, when enabled for a line-mode, can be sent at
both the beginning and at the end of the session (start-stop) or only at the
end (stop-only). If none is specified, accounting is disabled for the specified
list. If tacacs is specified as the accounting method, accounting records are
transmitted to a TACACS+ server. If radius is the specified accounting
method, accounting records are transmitted to a RADIUS server.
Note the following:
• A maximum of five Accounting Method lists can be created for each exec
and commands type.
• Only the default Accounting Method list can be created for RADIUS.
There is no provision to create more.
• The same list-name can be used for both exec and commands accounting
type
• AAA Accounting for commands with RADIUS as the accounting method
is not supported.
• Start-stop or None are the only supported record types for RADIUS
accounting. Start-stop enables accounting and None disables accounting.
• RADIUS is the only accounting method type supported for 802.1X
accounting.
• For the same set of accounting type and list name, the administrator can
change the record type or the methods list, without having to first delete
the previous configuration.
• Interim accounting is enabled using the aaa accounting update command.
• Use either the aaa accounting dot1x default none or no aaa accounting
dot1x default command to disable dot1x accounting.
• Use the no aaa accounting exec or no aaa accounting commands to
disable aaa accounting and optionally delete an accounting method list.
Example
The following shows several examples of the command.
(console)#configure
(console-config)#aaa accounting commands default stop-only tacacs