Accounting Identity List

Configuring Accounting Identity List (GUI)

Procedure

Step 1

Choose Configuration > Security > AAA.

Step 2

In the AAA Method List tab, go to the Accounting section, and click Add.

Step 3

In the Quick Setup: AAA Accounting window that is displayed, enter a name for your method list.

Step 4

Choose the type of authentication as identity, in the Type drop-down list.

Step 5

Choose the server groups you want to use to authenticate access to your network, from the Available Server Groups list and click > icon to move them to the Assigned Server Groups list.

Step 6

Click Save & Apply to Device.

Configuring Accounting Identity List (CLI)

Accounting is the process of logging the user actions and keeping track of their network usage. Whenever a user successfully executes an action, the RADIUS accounting server logs the changed attributes, the user ID of the person who made the change, the remote host where the user is logged in, the date and time when the command was executed, the authorization level of the user, and a description of the action performed and the values provided.

Follow the procedure given below to configure accounting identity list.

Before you begin

Configure the RADIUS server and AAA group server.

Procedure

Command or Action Purpose

aaa accounting identity named-list start-stop group server-group-name

Example:

Device(config)# aaa accounting identity user1 start-stop group aaa-test

Enables accounting to send a start-record accounting notice when a client is authorized and a stop-record at the end.

Note

 

You can also use the default list, instead of a named list.
Whenever there is a change in the client attribute, for example, change in IP address, client roaming, and so on, an accounting interim update is sent to the RADIUS server.

Configuring Client Accounting (GUI)

Procedure

Step 1

Choose Configuration > Tags & Profiles > Policy.

Step 2

Click the Policy Profile Name and in the Edit Policy Profile window, go to the Advanced tab.

Step 3

From the Accounting List drop-down, select the appropriate accounting list for this policy profile. This will ensure that the policy profile undergoes that type of accounting you want to perform, before allowing it access to the network.

Step 4

Click Save & Apply to Device.

Configuring Client Accounting (CLI)

Follow the procedure given below to configure client accounting.

Before you begin

Ensure that RADIUS accounting is configured.

Procedure

  Command or Action Purpose

Step 1

wireless profile policy profile-policy

Example:

Device(config)# wireless profile policy default-policy-profile

Configures WLAN policy profile and enters wireless policy configuration mode.

Step 2

shutdown

Example:

Device(config-wireless-policy)# shutdown

Disables the policy profile.

Step 3

accounting-list list-name

Example:

Device(config-wireless-policy)# accounting-list user1

Sets the accounting list.

Step 4

no shutdown

Example:

Device(config-wireless-policy)# no shutdown

Enables the policy profile.