topic A lot of changes around the in Network Access Control

New AAA command in IOS 15.X

mose — Mon, 11 Mar 2019 05:19:33 GMT

Hi all,

I have a question regarding the AAA accounting commands.

In IOS 12.X and below the accounting commands are in one line like below.

aaa accounting exec default start-stop group tacacs1
aaa accounting commands 1 default start-stop group tacacs1
aaa accounting commands 15 default start-stop group tacacs1

Beginning with IOS 15.x you can configure the accounting commands like this.

aaa accounting exec default
action-type start-stop
group tacacs1
!
aaa accounting commands 1 default
action-type start-stop
group tacacs1
!
aaa accounting commands 15 default
action-type start-stop
group tacacs1

My question is if the older command will be depricated in the future or will both be available in parallel?

I couldn´t find any hint on the Cisco homepage, the new command is even not documented in any configuration guide I have checked.

A lot of changes around the

nspasov — Sun, 11 Jan 2015 08:25:57 GMT

A lot of changes around the AAA syntax were introduced in the 15.x code. However, I have not heard anything about the aaa accounting...commands to be going out of fashion 🙂 Of course, you should take that with a grain of salt and perhaps check with Cisco. Usually though, when a command is going to be getting taken out of the CLI you would get a warning. For instance, the legacy RADIUS server configurations are definitely going to be taken away and users now get a warning when trying to use the syntax:

switch(config)#$er host 1.1.1.1 auth-port 1812 acct-port 1813 key cisco      
 Warning: The CLI will be deprecated soon
 'radius-server host 1.1.1.1 auth-port 1812 acct-port 1813 key cisco'
 Please move to 'radius server <name>' CLI.

Thank you for rating helpful posts!

Thanks for your answer!

mose — Tue, 20 Jan 2015 19:15:18 GMT

Thanks for your answer!

No problem! Glad I can help!

nspasov — Tue, 20 Jan 2015 19:49:36 GMT

No problem! Glad I can help! If your issue is resolved, you should mark the thread as "answered" 🙂