CLI Guide

Security Commands 927
(console-config)#aaa accounting exec default start-stop radius
(console-config)#aaa accounting dot1x default start-stop radius
(console-config)#aaa accounting dot1x default none
(console-config)#exit
For the same set of accounting type and list name, the administrator can
change the record type, or the methods list, without having to first delete the
previous configuration. The first aaa command creates a method list for exec
sessions with the name ExecList, with record-type as stop-only and the
method as TACACS+. The second command changes the record type to
start-stop from stop-only for the same method list. The third command for
the list changes the methods list to {tacacs,radius} from {tacacs}.
(console)#configure
(console-config)#aaa accounting exec ExecList stop-only tacacs
(console-config)#aaa accounting exec ExecList start-stop tacacs
(console-config)#aaa accounting exec ExecList start-stop tacacs radius
(console-config)#exit
This example shows how to enable dot1x accounting to RADIUS server for
start, interim and stop reports. Interim reports are sent every 60 minutes.
(console)#configure
(console-config)#aaa accounting dot1x default start-stop radius
(console-config)#aaa accounting update periodic 60
The following shows an example of the no version of the command.
(console)#configure
(console-config)#aaa accounting commands userCmdAudit stop-only tacacs
(console-config)#no aaa accounting commands userCmdAudit
(console-config)#exit
aaa accounting delay-start
Use the aaa accounting delay-start command to delay the sending of Acct-
Start packets to RADIUS accounting server(s).
Syntax
aaa accounting delay-start [extended-time delay_value]
no aaa accounting delay-start
delay_value—The maximum number of seconds to wait before sending
the Acct-Start packet to the RADIUS accounting server. Range: 1 to 300
seconds.