Configure accounting identity list (GUI)

Create a method list for accounting identity using the GUI to control and monitor user access to your network.

Procedure

Step 1

Choose Configuration > Security > AAA.

Step 2

In the AAA Method List tab, go to the Accounting section, and click Add.

Step 3

In the Quick Setup: AAA Accounting window that is displayed, enter a name for your method list.

Step 4

Select the type of authentication as identity, in the Type drop-down list.

Step 5

Choose the server groups you want to use to authenticate access to your network, from the Available Server Groups list and click > icon to move them to the Assigned Server Groups list.

Step 6

Click Save & Apply to Device.

Configure accounting identity list (CLI)

Enable RADIUS accounting with an identity list to log user actions and network usage events using commands.

When a user successfully executes an action, the RADIUS accounting server logs the changed attributes, user ID, remote host, date and time of execution, authorization level, description of the action performed, and values provided.

Follow the procedure given below to configure accounting identity list.

Before you begin

Configure the RADIUS server and AAA group server.

Procedure

Enable accounting to send a start-record accounting notice when a client is authorized and a stop-record at the end.

Example:

Device(config)# aaa accounting identity user1 start-stop group aaa-test

Note

 

You can also use the default list, instead of a named list.

Configure client accounting (GUI)

Enable client accounting on a specified policy profile through the GUI.

Procedure

Step 1

Choose Configuration > Tags & Profiles > Policy.

Step 2

Click the Policy Profile Name. In the Edit Policy Profile window, go to the Advanced tab.

Step 3

From the Accounting List drop-down, select the appropriate accounting list for this policy profile. The policy profile uses the accounting type you selected before gaining access to the network.

Step 4

Click Save & Apply to Device.

Configure client accounting (CLI)

Enable client accounting on a WLAN policy profile to track user activity and support auditing with an accounting server using commands.

Procedure

Step 1

Configure WLAN policy profile and enter the wireless policy configuration mode.

Example:

Device(config)# wireless profile policy default-policy-profile

Step 2

Disable the policy profile.

Example:

Device(config-wireless-policy)# shutdown

Step 3

Set the accounting list.

Example:

Device(config-wireless-policy)# accounting-list user1

Step 4

Enable the policy profile.

Example:

Device(config-wireless-policy)# no shutdown