7-28
Catalyst 2950 Desktop Switch Software Configuration Guide
78-14982-01
Chapter 7 Administering the Switch
Controlling Switch Access with RADIUS
Beginn ing in pri vile ged EXEC mo de, follo w these ste ps to specif y RADIUS author ization for privile ged
EXEC a cce ss an d n etwor k ser vi ces:
To disable a u thor iza tion, use the no aaa authorization {network | exec} method1 global configuration
comm an d.

Starting RADIUS Accounting

The AAA accounting feature tracks the services that users are accessing and the amount of network
resources th at the y are co nsuming. When AAA ac counting is enabled, the switc h reports use r acti vity to
the RADIUS security server in the form of accounting records. Each accounting record contains
accou nting att rib ute-v alu e (AV) pairs and is st ored on th e security serve r . This dat a can then be analyze d
for network ma nageme nt, client billing , or auditing.
Beginning in privileged EXEC mode, follow these steps to enable RADIUS accounting for each Cisco
IOS privilege level and for network services:
To disable accounting, use the no aaa ac co unting {network | exec} {start-stop} method1... glob al
configurati on comm a nd.
Command Purpose
Step 1 configure terminal Enter globa l configurati on mode.
Step 2 aaa authorization network radius Configure the switch for user RADIUS authorization for all
network-re lated s er vice r eque sts.
Step 3 aaa aut horiz ation e xec r adius Configure the switch for user RADIUS authorization to determine if the
user has privileged EXEC access.
The exec keyword mig ht r etur n user p rofile inf orm ation (s uc h as
autocommand information).
Step 4 end Return to privileged EXEC mode.
Step 5 show running-config Verify your e ntri es.
Step 6 copy running-config startup-config (Optiona l) Save your entries in the co nfigurati on file.
Command Purpose
Step 1 configure terminal Enter glob al co nfiguration mo de.
Step 2 aaa acco unting network star t-stop
radius Enable RADIUS accounting for all network-related service requests.
Step 3 aaa acco unting ex ec start- stop radius Enable RADIUS accounting to send a start-record accounting notice at
the beginnin g of a privileged EXEC pr ocess and a stop- reco rd at the
end.
Step 4 end Return to privileged EXEC mode.
Step 5 show running-config Ve rify your entries.
Step 6 copy running-config startup-config (Optional) Save your entries in the configuration file.