Implementing Accounting Method Lists

AAA accounting is disabled by default. If the aaa accounting command for a particular accounting type is issued without a named method list specified, the default method list is automatically applied to all interfaces or lines (where this accounting type applies), except those with a named method list explicitly defined. (A defined method list always overrides the default method list.) If no default method list is defined, then no accounting takes place.

To configure AAA accounting using named method lists, perform the following tasks beginning in Global Configuration mode:

Task	Command
Create an accounting method list and enable accounting.	aaa accounting {accounting-type} list-name {accounting-method} method1 [method2...]
Enter Line Configuration mode on which you want to apply the accounting method list. or Enter the Interface Configuration mode for the interfaces to which you want to apply the accounting method list.	line [aux \| console \| tty \| vty] line-number [ending-line-number] or interface interface-type interface-number
Apply the accounting list to the line(s). or Apply the accounting list to the interface.	aaa accounting {accounting-type} list-name or ppp accounting list-name

The following example defines the network accounting method list named XYZ-acct, where command accounting services are provided by a TACACS+ security server with a stop-only restriction.

Rtr1(config)#aaa new-model 
Rtr1(config)#tacacs-server host 192.168.1.4
Rtr1(config)#tacacs-server key seattle19
Rtr1(config)#aaa authentication login XYZ-access group tacacs+ enable none
Rtr1(config)#aaa authentication ppp PPP-access group tacacs+ none
Rtr1(config)#aaa authorization network xyz-auth group tacacs+ local
Rtr1(config)#aaa accounting network xyz-acct group start-stop tacacs+ 
Rtr1(config)#interface serial 0/1
Rtr1(config-if)#encapsulation ppp
Rtr1(config-if)#ppp authentication ppp-access
Rtr1(config-if)#ppp authorization xyz-auth
Rtr1(config-if)#ppp accounting xyz-acct