Accounting Commands

This chapter describes the function and displays the syntax for accounting commands. For more information about defaults and usage guidelines, see the corresponding chapter of the Security Command Reference.

a aa accounting

To enable AAA accounting of requested services for billing or security purposes when you use RADIUS or TACACS+, use the aaa accounting global configuration command. Use the no form of this command to disable accounting.

system	Performs accounting for all system-level events not associated with users, such as reloads.
network	Runs accounting for all network-related service requests, including SLIP, PPP, PPP NCPs, and ARA.
exec	Runs accounting for EXEC session (user shells). This keyword might return user profile information such as autocommand information.
connection	Provides information about all outbound connections made from the network access server, such as Telnet, local-area transport (LAT), TN3270, packet assembler/disassembler (PAD), and rlogin.
commands	Runs accounting for all commands at the specified privilege level.
level	Specific command level to track for accounting. Valid entries are 0 through 15.
default	Uses the listed accounting methods that follow this argument as the default list of methods for accounting services.
list-name	Character string used to name the list of accounting methods.
start-stop	Sends a start accounting notice at the beginning of a process and a stop accounting notice at the end of a process. The start accounting record is sent in the background. The requested user process begins regardless of whether or not the start accounting notice was received by the accounting server.
wait-start	As in start-stop, sends both a start and a stop accounting notice to the accounting server. However, if you use the wait-start keyword, the requested user service does not begin until the start accounting notice is acknowledged. A stop accounting notice is also sent.
stop-only	Sends a stop accounting notice at the end of the requested user process.
none	Disables accounting services on this line or interface.
method1 [method2...]	At least one of the methods.

aaa accounting {system | network | exec | connection | commands level} {default | list-name}
{start-stop | wait-start | stop-only | none} [method1 [method2...] ]
no aaa accounting {system | network | exec | commands level}

system

Performs accounting for all system-level events not associated with users, such as reloads.

network

Runs accounting for all network-related service requests, including SLIP, PPP, PPP NCPs, and ARA.

exec

Runs accounting for EXEC session (user shells). This keyword might return user profile information such as autocommand information.

connection

Provides information about all outbound connections made from the network access server, such as Telnet, local-area transport (LAT), TN3270, packet assembler/disassembler (PAD), and rlogin.

commands

Runs accounting for all commands at the specified privilege level.

level

Specific command level to track for accounting. Valid entries are 0 through 15.

default

Uses the listed accounting methods that follow this argument as the default list of methods for accounting services.

list-name

Character string used to name the list of accounting methods.

start-stop

Sends a start accounting notice at the beginning of a process and a stop accounting notice at the end of a process. The start accounting record is sent in the background. The requested user process begins regardless of whether or not the start accounting notice was received by the accounting server.

wait-start

As in start-stop, sends both a start and a stop accounting notice to the accounting server. However, if you use the wait-start keyword, the requested user service does not begin until the start accounting notice is acknowledged. A stop accounting notice is also sent.

stop-only

Sends a stop accounting notice at the end of the requested user process.

none

Disables accounting services on this line or interface.

method1 [method2...]

At least one of the methods.

aaa accounting suppress null-username

To prevent the Cisco IOS software from sending accounting records for users whose username string is NULL, use the aaa accounting suppress null-username global configuration command. Use the no form of this command to allow sending records for users with a NULL username.

aaa accounting suppress null-username
no aaa accounting suppress null-username

aaa accounting update

To enable periodic interim accounting records to be sent to the accounting server, use the aaa accounting update global configuration command. Use the no form of this command to disable interim accounting updates.

newinfo	Causes an interim accounting record to be sent to the accounting server whenever there is new accounting information to report relating to the user in question.
periodic	Causes an interim accounting record to be sent to the accounting server periodically, as defined by the argument number.
number	Integer specifying number of minutes.

aaa accounting update {newinfo | periodic number}
no aaa accounting update

newinfo

Causes an interim accounting record to be sent to the accounting server whenever there is new accounting information to report relating to the user in question.

periodic

Causes an interim accounting record to be sent to the accounting server periodically, as defined by the argument number.

number

Integer specifying number of minutes.

a ccounting

To enable AAA accounting services to a specific line or group of lines, use the accounting line configuration command. Use the no form of this command to disable AAA accounting services.

arap	Enables accounting on line(s) configured for AppleTalk Remote Access (ARA) protocol.
commands	Enables accounting on the selected line(s) for all commands at the specified privilege level.
level	Specifies the command level to track for accounting. Valid entries are 0 through 15.
connection	Enables both CHAP and PAP, and performs PAP authentication before CHAP.
exec	Enables accounting for all system-level events not associated with users, such as reloads on the selected line(s).
default	(Optional) The name of the default method list, created with the aaa accounting command.
list-name	(Optional) Specifies the name of a list of accounting methods to use. If no list name is specified, the system uses the default. The list is created with the aaa accounting command.

accounting {arap | commands level | connection | exec} [default | list-name]
no accounting {arap | commands level | connection | exec} [default | list-name]

arap

Enables accounting on line(s) configured for AppleTalk Remote Access (ARA) protocol.

commands

Enables accounting on the selected line(s) for all commands at the specified privilege level.

level

Specifies the command level to track for accounting. Valid entries are 0 through 15.

connection

Enables both CHAP and PAP, and performs PAP authentication before CHAP.

exec

Enables accounting for all system-level events not associated with users, such as reloads on the selected line(s).

default

(Optional) The name of the default method list, created with the aaa accounting command.

list-name

(Optional) Specifies the name of a list of accounting methods to use. If no list name is specified, the system uses the default. The list is created with the aaa accounting command.

ppp accounting

To enable AAA accounting services on the selected interface, use the ppp accounting interface configuration command. Use the no form of this command to disable AAA accounting services.

default	(Optional) The name of the method list is created with the aaa accounting command.
list-name	(Optional) Specifies the name of a list of accounting methods to use. If no list name is specified, the system uses the default. The list is created with the aaa accounting command.

ppp accounting [default | list-name]
no ppp accounting

default

(Optional) The name of the method list is created with the aaa accounting command.

list-name

(Optional) Specifies the name of a list of accounting methods to use. If no list name is specified, the system uses the default. The list is created with the aaa accounting command.

show accounting

Use the show accounting EXEC command to step through all active sessions and to print all the accounting records for actively accounted functions. Use the no form of this command to disable viewing and printing accounting records.

system	Displays accounting for all system-level events not associated with users, such as reloads.
network	Displays accounting for all network-related service requests, including SLIP, PPP, PPP NCPs, and ARA.
exec	Displays accounting for EXEC session (user shells). This keyword might return user profile information such as autocommand information.
command	Displays accounting for all commands at the specified privilege level.
level	Specifies the command level to display. Valid entries are 0 through 15.
start-stop	Displays a start record accounting notice at the beginning of a process and a stop record at the end of a process. The start accounting record is sent in the background. The requested user process begins regardless of whether or not the start accounting record was received by the accounting server.
wait-start	Displays both a start and a stop accounting notice to the accounting server.
stop-only	Displays a stop record accounting notice at the end of the requested user process.
tacacs+	Displays the TACACS-style accounting.

show accounting {system | network | exec | command level} {start-stop |
wait-start | stop-only} tacacs+
no show accounting {system | network | exec | command level}

system

Displays accounting for all system-level events not associated with users, such as reloads.

network

Displays accounting for all network-related service requests, including SLIP, PPP, PPP NCPs, and ARA.

exec

Displays accounting for EXEC session (user shells). This keyword might return user profile information such as autocommand information.

command

Displays accounting for all commands at the specified privilege level.

level

Specifies the command level to display. Valid entries are 0 through 15.

start-stop

Displays a start record accounting notice at the beginning of a process and a stop record at the end of a process. The start accounting record is sent in the background. The requested user process begins regardless of whether or not the start accounting record was received by the accounting server.

wait-start

Displays both a start and a stop accounting notice to the accounting server.

stop-only

Displays a stop record accounting notice at the end of the requested user process.

tacacs+

Displays the TACACS-style accounting.

Table of Contents