AAA Accounting start-stop and start-only

When deploying AAA with an external AAA server such as RADIUS or TACACS+, the aaa accounting command is used. With this command, there are several options concerning when to send accounting information.

In particular, the start-stop and start-only keywords can be used. According to Cisco's IOS CLI command reference, these are their functions:

start-stop - Sends a “start” accounting notice at the beginning of a process and a “stop” accounting notice at the end of a process. The “start” accounting record is sent in the background. The requested user process begins regardless of whether the “start” accounting notice was received by the accounting server.

stop-only - Sends a stop accounting record for all cases including authentication failures regardless of whether the aaa accounting send stop-record authentication failure command is configured.

The choice of which to use depends on your specific requirements for tracking and recording network activity. If you only need to know when a process has ended, stop-only should suffice. But if you need to track the entire lifecycle of a process, from start to finish, you would use start-stop.

Example

Example usage of the aaa accounting command:

Router(config)# aaa accounting network default start-stop group radius

Router(config)# aaa accounting network default stop-only group radius

In these examples, network refers to network-related service, default is the default method list, and group radius specifies that RADIUS is used for accounting.

Links

https://forum.networklessons.com/t/aaa-and-802-1x-authentication/1153/40?u=lagapidis