aaa accounting port-access (RADIUS only)

Syntax

General syntax definition:

aaa accounting port-access {start-stop {{local | group <GROUP-NAME>} |
              {interim <INTERVAL> group <GROUP-NAME>}}}

aaa accounting port-access {stop-only {local | group <GROUP-NAME>}}

no aaa accounting port-access [local | group | interim]

List of all possible syntax for this command:

aaa accounting port-access start-stop local
aaa accounting port-access start-stop group <GROUP-NAME>
aaa accounting port-access start-stop interim <INTERVAL> group <GROUP-NAME>
aaa accounting port-access stop-only local
aaa accounting port-access stop-only group <GROUP-NAME>

no aaa accounting port-access
no aaa accounting port-access local
no aaa accounting port-access group
no aaa accounting port-access interim

Description

Configures port access accounting information that is captured for 802.1X and MAC-authenticated clients.

Defines port access accounting as being local (with the parameter local) (the default). Or defines port access accounting as being remote (with the parameter group <GROUP-NAME>) with a sequence of remote RADIUS servers in a single RADIUS server group to be accessed for port access accounting purposes.

For remote RADIUS port access accounting, the information is sent to the first reachable remote RADIUS server in the specified group. If a user-defined RADIUS server group is named in your command, it must exist.

The no form of this command works as follows:
  • no aaa accounting port-access: Globally unconfigures port access accounting.

  • no aaa accounting port-access local: Unconfigures local port access accounting.

  • no aaa accounting port-access group: Unconfigures remote port access accounting.

  • no aaa accounting port-access interim: Unconfigures interim accounting updates.

Command context

config

Parameters

start-stop

Selects accounting information capture from the point at which the client is authenticated until the client disconnects.

stop-only

Selects accounting information capture only at the time when a client disconnects.

local
Selects local-only accounting.
group <GROUP-NAME>

Specifies a single RADIUS server group, either the built-in group named radius or a user-defined RADIUS server group. Only one RADIUS server group name can be provided.

interim <INTERVAL>

Enables interim accounting updates (between the start and stop) and specifies the interval at which the interim updates will be provided. Default: 60 minutes. Range: 1 to 525600 minutes.

Authority

Administrators or local user group members with execution rights for this command.

Examples

Configuring start-stop port access local accounting:

switch(config)# aaa accounting port-access start-stop local

Configuring start-stop port access remote accounting using the built-in radius server group:

switch(config)# aaa accounting port-access start-stop group radius

Configuring start-stop port access remote accounting using the built-in radius server group and enabling interim accounting updates with an interval of 60 minutes:

switch(config)# aaa accounting port-access start-stop interim 60 group radius

Configuring stop-only port access remote accounting using the built-in radius server group:

switch(config)# aaa accounting port-access stop-only group radius

Unconfiguring remote port access accounting:

switch(config)# no aaa accounting port-access group