aaa accounting dot1x
To enable authentication, authorization, and accounting (AAA) accounting and to create method lists defining specific accounting methods on a per-line or per-interface basis for IEEE 802.1x sessions, use the aaa accounting dot1x command in global configuration mode. To disable IEEE 802.1x accounting, use the no form of this command.
aaa accounting dot1x { name | default } start-stop { broadcast group { name | radius | tacacs+} [ group { name | radius | tacacs+} ... ] | group { name | radius | tacacs+} [ group { name | radius | tacacs+} ... ]}
no aaa accounting dot1x { name | default }
Syntax Description
name |
Name of a server group. This is optional when you enter it after the broadcast group and group keywords. |
default |
Specifies the accounting methods that follow as the default list for accounting services. |
start-stop |
Sends a start accounting notice at the beginning of a process and a stop accounting notice at the end of a process. The start accounting record is sent in the background. The requested user process begins regardless of whether or not the start accounting notice was received by the accounting server. |
broadcast |
Enables accounting records to be sent to multiple AAA servers and sends accounting records to the first server in each group. If the first server is unavailable, the switch uses the list of backup servers to identify the first server. |
group |
The group keyword is optional when you enter it after the broadcast group and group keywords. You can enter more than optional group keyword. |
radius |
(Optional) Enables RADIUS accounting. |
tacacs+ |
(Optional) Enables TACACS+ accounting. |
Command Default
AAA accounting is disabled.
Command Modes
Global configuration
Command History
Release |
Modification |
---|---|
Cisco IOS Release 15.0(2)EXCisco IOS Release 15.2(5)E |
This command was introduced. |
Usage Guidelines
This command requires access to a RADIUS server.
We recommend that you enter the dot1x reauthentication interface configuration command before configuring IEEE 802.1x RADIUS accounting on an interface.
Examples
This example shows how to configure IEEE 802.1x accounting:
Device(config)# aaa new-model
Device(config)# aaa accounting dot1x default start-stop group radius