Filter
Top Products
116
Enhancements in Release F.04.08
Configuring RADIUS Authentication and Accounting
■ System accounting: Provides records containing the information listed below when system
events occur on the switch, including system reset, system boot, and enabling or disabling
of system accounting.
The switch forwards the accounting information it collects to the designated RADIUS server, where
the information is formatted, stored, and managed by the server. For more information on this aspect
of RADIUS accounting, refer to the documentation provided with your RADIUS server.
Operating Rules for RADIUS Accounting
■ You can configure up to three types of accounting to run simultaneously: exec, system, and
network.
■ RADIUS servers used for accounting are also used for authentication.
■ The switch must be configured to access at least one RADIUS server.
■ RADIUS servers are accessed in the order in which their IP addresses were configured in
the switch. Use show radius to view the order. As long as the first server is accessible and
responding to authentication requests from the switch, a second or third server will not be
accessed. (For more on this topic, refer to “Changing RADIUS-Server Access Order” on page
126.)
■ If access to a RADIUS server fails during a session, but after the client has been authenticated,
the switch continues to assume the server is available to receive accounting data. Thus, if
server access fails during a session, it will not receive accounting data transmitted from the
switch.
• Acct-Session-Id
• Acct-Status-Type
• Acct-Terminate-Cause
• Acct-Authentic
• Acct-Delay-Time
•User-Name
• Service-Type
• NAS-IP-Address
• NAS-Identifier
• Calling-Station-Id