×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

aaa accounting sent to multiple active servers

Unanswered Question
Nov 2nd, 2006
User Badges:
  • Silver, 250 points or more

Hi!


Good day! I urgently need help on how to configure aaa on a router to send accounting start stop attributes to multiple servers simultaneously.


Thanks and Regards,

Albert

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
a.kiprawih Fri, 11/03/2006 - 22:11
User Badges:
  • Gold, 750 points or more


You can use the keyword 'broadcast' in the aaa accounting parameter, e.g:


aaa accounting exec default start-stop broadcast group TACACS01 group TACACS02


But in order to have multiple active ACS/accounting servers, I think you need to define each of them under different group.


The 'broadcast' feature allows router to send accounting records to multiple AAA servers - every 1st server in every group.


So, if you have say 2 ACS, defined 2 group, and add these group in the aaa accounting parameters.


Example (portions):


aaa new-model

aaa group server tacacs+ TACACS01

server 10.1.1.1

!

aaa group server tacacs+ TACACS02

server 10.1.1.2

!

aaa accounting exec default start-stop broadcast group TACACS01 group TACACS02

!

tacacs-server host 10.1.1.1 key cisco

tacacs-server host 10.1.1.2 key cisco

!



HTH

AK

a.kiprawih Fri, 11/03/2006 - 22:14
User Badges:
  • Gold, 750 points or more

aaa accounting broadcast command:


broadcast (Optional):


Enables sending accounting records to multiple AAA servers. Simultaneously sends accounting records to the first server in each group. If the first server is unavailable, failover occurs using the backup servers defined within that group.

Actions

This Discussion