Question on AAA accounting command?

[Kevin Smith]

Is AAA command “aaa accounting commands 15 default start-stop group” just for tacacs+ groups and not for radius?

[jj27 · Accepted solution]

Command accounting is only supported on TACACS+, as far as I know.

According to this document, http://www.cisco.com/c/en/us/td/docs/ios/sec_user_services/configuration/guide/15_0s/sec_securing_user_services_15_0S_book/sec_cfg_accountg.html#wp1053228, it states "The Cisco Systems implementation of RADIUS does not support command accounting."

[Jatin Katyal · Accepted solution]

jjohnston1127 answered correctly. Command authorization and command accounting are only supported by the tacacs protocol.

You will not even see an option for radius.

jkatyel(config)#aaa accounting commands 15 default start-stop gr
jkatyel(config)#aaa accounting commands 15 default start-stop group ?
  WORD     Server-group name
  tacacs+  Use list of all Tacacs+ hosts.

Accounting supported by radius

https://tools.ietf.org/html/rfc2866

Regards,

Jatin Katyal

*Do rate helpful posts*