Cisco Cisco IOS Software Release 12.4(2)XB6 Références techniques

dot1x system-auth-control 

Use the show radius statistics command to display the number of RADIUS messages that do not receive 
the accounting response message.

The following example defines a default commands accounting method list, where accounting services 
are provided by a TACACS+ security server, set for privilege level 15 commands with a stop-only 
restriction.

aaa accounting commands 15 default stop-only group tacacs+

The following example defines a default auth-proxy accounting method list, where accounting services 
are provided by a TACACS+ security server with a start-stop restriction. The aaa accounting command 
activates authentication proxy accounting.

aaa new-model

aaa authentication login default group tacacs+

aaa authorization auth-proxy default group tacacs+

aaa accounting auth-proxy default start-stop group tacacs+

The following example defines a default system accounting method list, where accounting services are 
provided by RADIUS security server “server1” with a start-stop restriction. The aaa accounting 
command specifies accounting for vrf “vrf1.”

aaa accounting system default vrf1 water start-stop group server1

The following example defines a default IEEE 802.1x accounting method list, where accounting services 
are provided by a RADIUS server. The aaa accounting command activates IEEE 802.1x accounting.

aaa new model

aaa authentication dot1x default group radius

aaa authorization dot1x default group radius

aaa accounting dot1x default start-stop group radius

The following example shows how to enable network accounting and send tunnel and tunnel-link 
accounting records to the RADIUS server. (Tunnel-Reject and Tunnel-Link-Reject accounting records 
are automatically sent if either start or stop records are configured.)

aaa accounting network tunnel start-stop group radius

aaa accounting network session start-stop group radius

The following example shows how to enable IEEE 802.1x accounting:

aaa accounting dot1x default start-stop group radius

aaa accounting system default start-stop group radius

Specifies one or more AAA methods for use on interfaces running IEEE 
802.1X.

Specifies one or more AAA authentication methods for use on serial 
interfaces running PPP.

Sets parameters that restrict user access to a network.

Groups different RADIUS server hosts into distinct lists and distinct 
methods.

Groups different server hosts into distinct lists and distinct methods.