aaa accounting sent to multiple active servers

albert.remo · ‎11-02-2006

Hi!

Good day! I urgently need help on how to configure aaa on a router to send accounting start stop attributes to multiple servers simultaneously.

Thanks and Regards,

Albert

a.kiprawih · ‎11-03-2006

You can use the keyword 'broadcast' in the aaa accounting parameter, e.g:

aaa accounting exec default start-stop broadcast group TACACS01 group TACACS02

But in order to have multiple active ACS/accounting servers, I think you need to define each of them under different group.

The 'broadcast' feature allows router to send accounting records to multiple AAA servers - every 1st server in every group.

So, if you have say 2 ACS, defined 2 group, and add these group in the aaa accounting parameters.

Example (portions):

aaa new-model

aaa group server tacacs+ TACACS01

server 10.1.1.1

!

aaa group server tacacs+ TACACS02

server 10.1.1.2

!

aaa accounting exec default start-stop broadcast group TACACS01 group TACACS02

!

tacacs-server host 10.1.1.1 key cisco

tacacs-server host 10.1.1.2 key cisco

!

HTH

AK

a.kiprawih · ‎11-03-2006

aaa accounting broadcast command:

broadcast (Optional):

Enables sending accounting records to multiple AAA servers. Simultaneously sends accounting records to the first server in each group. If the first server is unavailable, failover occurs using the backup servers defined within that group.

albert.remo · ‎11-04-2006

Thanks! :)