Cisco Systems 78-11741-02 manual Configuring IP MAC Accounting, IPC-109

Configuring IP Services

Configuring IP Accounting

To configure other IP accounting functions, use the following commands in global configuration mode, as needed:

Command	Purpose
Router(config)# ip accounting-threshold	Sets the maximum number of accounting entries to be created.
threshold
Router(config)# ip accounting-list	Filters accounting information for hosts.
ip-address wildcard
Router(config)# ip accounting-transits	Controls the number of transit records that will be stored in the IP
count	accounting database.

To display IP access violations for a specific IP accounting database, use the following command in EXEC mode:

Command	Purpose
Router# show ip accounting [checkpoint]	Displays IP access violation information.
access-violations

To display IP access violations, include the access-violationskeyword in the show ip accounting EXEC command. If you do not specify the keyword, the command defaults to displaying the number of packets that have passed access lists and were routed. The access violations output displays the number of the access list failed by the last packet for the source and destination pair. The number of packets reveals how aggressive the attack is upon a specific destination.

Use the show ip accounting EXEC command to display the active accounting database, and traffic coming from a remote site and transiting through a router. To display the checkpointed database, use the show ip accounting checkpoint EXEC command. The clear ip accounting EXEC command clears the active database and creates the checkpointed database.

Configuring IP MAC Accounting

The MAC address accounting functionality provides accounting information for IP traffic based on the source and destination MAC addresses on LAN interfaces. MAC accounting calculates the total packet and byte counts for a LAN interface that receives or sends IP packets to or from a unique MAC address. It also records a timestamp for the last packet received or sent. For example, with IP MAC accounting, you can determine how much traffic is being sent to and/or received from various peers at NAPS/peering points. IP MAC accounting is supported on Ethernet, FastEthernet, and FDDI interfaces and supports Cisco Express Forwarding (CEF), distributed CEF (dCEF), flow, and optimum switching.

To configure the interface for IP accounting based on the MAC address, perform the following steps beginning in global configuration:

	Command	Purpose
Step 1
	Router(config)# interface type number	Specifies the interface and enters interface configuration
		mode.
Step 2
	Router(config-if)#ip accounting mac-address	Configures IP accounting based on the MAC address of
	{input output}	received (input) or transmitted (output) packets

Cisco IOS IP Configuration Guide

IPC-109