Users Guide

Authentication, Authorization, and Accounting 315
Accounting
Accounting is used to record security events, such as a user logging in or
executing a command. Accounting records may be sent upon completion of
an event (stop-only) or at both the beginning and end of an event (start-
stop). There are three types of accounting: commands, Dot1x, and exec.
Commands—Sends accounting records for command execution.
Dot1x—Sends accounting records for network access.
Exec—Sends accounting records for management access (logins).
For more information about the data sent in accounting records, see "Which
RADIUS Attributes Does the Switch Support?" on page 271 and "Using
TACACS+" on page 274.
Table 9-10 shows the valid methods for each type of accounting:
RADIUS Accounting
Dell EMC Networking N-Series switches support RADIUS accounting. The
supported accounting types are start-only or start-stop.
The following attributes may be sent in the Accounting Stop record that is
sent to the RADIUS server when the switch is configured for 802.1X
accounting:
User-Name (1)
NAS-IP-Address (4)
Framed-IP-Address (8)
Called-Station-Id (30)
Calling-Station-Id (31)
NAS-Identifier (33)
NAS-Port-Type (61)
Table 9-10. Accounting Methods
Method Commands Dot1x Exec
radius no yes yes
tacacs yes no yes