Cisco Systems VC-289 Configuring User Accounting Activity for RADIUS, Command, Purpose, VC-320

Configuring H.323 Gatekeepers and Proxies

H.323 Gatekeeper Configuration Task List

Configuring User Accounting Activity for RADIUS

After AAA has been enabled and the gateway has been configured to recognize RADIUS as the remote security server providing authentication services, the next step is to configure the gateway to report user activity to the RADIUS server in the form of connection accounting records. To send connection accounting records to the RADIUS server, use the following commands beginning in global configuration mode:

	Command	Purpose
Step 1
	Router(config)# aaa accounting connection h323	Defines the accounting method list H.323 with
	{stop-only start-stop wait-start none}	RADIUS as a method.
	[broadcast] group group-name	The keywords and arguments are as follows:
		• stop-only—Sends a “stop” accounting notice at
		the end of the requested user process.
		• start-stop—Sends a “start” accounting notice at
		the beginning of a process and a “stop”
		accounting notice at the end of a process. The
		“start” accounting record is sent in the
		background. The requested user process begins
		regardless of whether the “start” accounting
		notice was received by the accounting server.
		• wait-start—Sends a “start” accounting notice at
		the beginning of a process and a “stop”
		accounting notice at the end of a process. The
		“start” accounting record is sent in the
		background. The requested user process does not
		begin until the “start” accounting notice is
		received by the server.
		• none—Disables accounting services on this line
		or interface.
		• broadcast—(Optional) Enables sending
		accounting records to multiple AAA servers.
		Simultaneously sends accounting records to the
		first server in each group. If the first server is
		unavailable, failover occurs using the backup
		servers defined within that group.
		• group group-name—Specifies the server group
		to be used for accounting services. The following
		are valid server group names:
		– string—Specifies the character string used to
		name a server group.
		– radius—Uses list of all RADIUS hosts.
		– tacacs+—Uses list of all TACACS+ hosts.

Cisco IOS Voice, Video, and Fax Configuration Guide

VC-320