topic Question on AAA accounting command? in Network Access Control

Question on AAA accounting command?

Kevin Smith — Mon, 11 Mar 2019 04:34:48 GMT

Is AAA command “aaa accounting commands 15 default start-stop group” just for tacacs+ groups and not for radius?

AAA accounting for commands

jj27 — Thu, 27 Mar 2014 00:00:36 GMT

Command accounting is only supported on TACACS+, as far as I know.

According to this document, http://www.cisco.com/c/en/us/td/docs/ios/sec_user_services/configuration/guide/15_0s/sec_securing_user_services_15_0S_book/sec_cfg_accountg.html#wp1053228, it states "The Cisco Systems implementation of RADIUS does not support command accounting."

jjohnston1127 answered

Jatin Katyal — Thu, 27 Mar 2014 03:00:13 GMT

jjohnston1127 answered correctly. Command authorization and command accounting are only supported by the tacacs protocol.

You will not even see an option for radius.

jkatyel(config)#aaa accounting commands 15 default start-stop gr
jkatyel(config)#aaa accounting commands 15 default start-stop group ?
WORD Server-group name
tacacs+ Use list of all Tacacs+ hosts.

Accounting supported by radius

https://tools.ietf.org/html/rfc2866

Regards,

Jatin Katyal

*Do rate helpful posts*