RADIUS Authentication and Accounting

Configuring RADIUS Accounting

The radius-server command as shown in figure 5-11, above, configures the switch to use a RADIUS server at IP address 10.33.18.151, with a (non-default) UDP accounting port of 1750, and a server-specific key of “source0151”.

2.Configure Accounting Types and the Controls for Sending Reports to the RADIUS Server

Select the Accounting Type(s):

■Exec: Use exec if you want to collect accounting information on login sessions on the switch via the console, Telnet, or SSH. (See also “Accounting Services” on page 5-4.)

■System: Use system if you want to collect accounting data when:

•A system boot or reload occurs

•System accounting is turned on or off

Note that there is no time span associated with using the system option. It simply causes the switch to transmit whatever accounting data it currently has when one of the above events occurs.

■Network: Use Network if you want to collect accounting information on 802.1X port-based-access users connected to the physical ports on the switch to access the network. (See also “Accounting Services” on page 4.)

■Commands: When commands authorization is enabled, a record accounting notice is sent after the execution of a command.

■Web or MAC: You can also use Web or MAC to collect accounting information.

Determine how you want the switch to send accounting data to a RADIUS server:

■Start-Stop:

•Send a start record accounting notice at the beginning of the account­ ing session and a stop record notice at the end of the session. Both notices include the latest data the switch has collected for the requested accounting type (Network, Exec, Commands, or System).

•Do not wait for an acknowledgement.

The system option (page 5-40) ignores start-stopbecause the switch sends the accumulated data only when there is a reboot, reload, or accounting on/off event.

5-40