Cisco Systems XR manual Aaa Read, write, Creates a method list to be used for authorization, SR-3

Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software

aaa accounting

Use the aaa accounting command to create default or named method lists defining specific accounting methods and that can be used on a per-line or per-interface basis. You can specify up to four methods in the method list. The list name can be applied to a line (console, aux, or vty template) to enable accounting on that particular line.

The Cisco IOS XR software supports both TACACS+ and RADIUS methods for accounting. The router reports user activity to the security server in the form of accounting records, which are stored on the security server.

Method lists for accounting define the way accounting is performed, enabling you to designate a particular security protocol to be used on specific lines or interfaces for particular types of accounting services.

For minimal accounting, include the stop-onlykeyword to send a “stop accounting” notice after the requested user process. For more accounting, you can include the start-stopkeyword, so that TACACS+ or RADIUS sends a “start accounting” notice at the beginning of the requested process and a “stop accounting” notice after the process. The accounting record is stored only on the TACACS+ or RADIUS server.

The requested user process begins regardless of whether the “start accounting” notice was received by the accounting server.

Note This command cannot be used with TACACS or extended TACACS.

Task ID

Examples

Task ID	Operations
aaa	read, write

The following example shows how to define a default commands accounting method list, where accounting services are provided by a TACACS+ security server, with a stop-only restriction:

RP/0/RP0/CPU0:router# configure

RP/0/RP0/CPU0:router(config)# aaa accounting commands default stop-only group tacacs+

Related Commands	Command	Description
	aaa authorization	Creates a method list to be used for authorization.

Cisco IOS XR System Security Command Reference

SR-3