tacacs accounting problem

rish01 · ‎08-07-2009

I have 7206 with 12.2 SB as a broadband PPPoE aggregator. 7206 uses tac_plus server to authenticate user PPPoE sessions. The problem is tac_plus does not log stop records. After some research I find out that router can not send accounting records which size exceeds 576 byte. Does anynoe know how to fix such problem?

gmarogi · ‎08-13-2009

For minimal accounting, use the stop-only keyword, which instructs the specified method (RADIUS or TACACS+) to send a stop record accounting notice at the end of the requested user process. For more accounting information, use the start-stop keyword to send a start accounting notice at the beginning of the requested event and a stop accounting notice at the end of the event. To stop all accounting activities on this line or interface, use the none keyword.

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_cfg_accountg.html#wp1017255