Cisco Systems OL-6415-04 manual Starting Radius Accounting

Chapter 7 Configuring RADIUS Servers

Configuring and Enabling RADIUS

Beginning in privileged EXEC mode, follow these steps to specify RADIUS authorization for privileged EXEC access and network services:

	Command	Purpose
Step 1
	configure terminal	Enter global configuration mode.
Step 2
	aaa authorization network radius	Configure the access point for user RADIUS authorization for all
		network-related service requests.
Step 3
	aaa authorization exec radius	Configure the access point for user RADIUS authorization to determine if
		the user has privileged EXEC access.
		The exec keyword might return user profile information (such as
		autocommand information).
Step 4
	end	Return to privileged EXEC mode.
Step 5
	show running-config	Verify your entries.
Step 6
	copy running-config startup-config	(Optional) Save your entries in the configuration file.

To disable authorization, use the no aaa authorization {network exec} method1 global configuration command.

Starting RADIUS Accounting

The AAA accounting feature tracks the services that users are accessing and the amount of network resources that they are consuming. When AAA accounting is enabled, the access point reports user activity to the RADIUS security server in the form of accounting records. Each accounting record contains accounting attribute-value (AV) pairs and is stored on the security server. This data can then be analyzed for network management, client billing, or auditing. See the “RADIUS Attributes Sent by the Access Point” section on page 7-18for a complete list of attributes sent and honored by the access point.

Beginning in privileged EXEC mode, follow these steps to enable RADIUS accounting for each Cisco IOS privilege level and for network services:

	Command	Purpose
Step 1
	configure terminal	Enter global configuration mode.
Step 2
	aaa accounting network start-stop	Enable RADIUS accounting for all network-related service requests.
	radius
Step 3
	ip radius source-interface bvi1	Configure the access point to send its BVI IP address in the
		NAS_IP_ADDRESS attribute for accounting records.
Step 4 aaa accounting update periodic minutes		Enter an accounting update interval in minutes.
Step 5
	end	Return to privileged EXEC mode.
Step 6
	show running-config	Verify your entries.
Step 7
	copy running-config startup-config	(Optional) Save your entries in the configuration file.

To disable accounting, use the no aaa accounting {network exec} {start-stop} method1... global configuration command.

Cisco Wireless ISR and HWIC Access Point Configuration Guide

7-12 OL-6415-04