Accounting service types

The switch supports four types of accounting services:
  • Network accounting:
    Provides records containing the information listed below on clients directly connected to the switch and operating under Port-Based Access Control (802.1X):

    • Acct-Session-Id

    • Acct-Status-Type

    • Acct-Terminate-Cause

    • Acct-Authentic

    • Acct-Delay-Time

    • Acct-Input-Packets

    • Acct-Output-Packets

    • Acct-Input-Octets

    • Nas-Port

    • Acct-Output-Octets

    • Acct-Session-Time

    • User-Name

    • Service-Type

    • NAS-IP-Address

    • NAS-Identifier

    • Calling-Station-Id

    • HP-acct-terminate-cause

    • MS-RAS-Vendor

  • Exec accounting:
    Provides records holding the information listed below about login sessions (console, Telnet, and SSH) on the switch:

    • Acct-Session-Id

    • Acct-Status-Type

    • Acct-Terminate-Cause

    • Acct-Authentic

    • Acct-Delay-Time

    • Acct-Session-Time

    • User-Name

    • Service-Type

    • NAS-IP-Address

    • NAS-Identifier

    • Calling-Station-Id

    • MS-RAS-Vendor

  • System accounting:
    Provides records containing the information listed below when system events occur on the switch, including system reset, system boot, and enabling or disabling of system accounting.

    • Acct-Session-Id

    • Acct-Status-Type

    • Acct-Terminate-Cause

    • Acct-Authentic

    • Acct-Delay-Time

    • Username

    • Service-Type

    • NAS-IP-Address

    • NAS-Identifier

    • Calling-Station-Id

    • Acct-Session-Time

    • MS-RAS-Vendor

  • Commands accounting:
    Provides records containing information on CLI command execution during user sessions.

    • Acct-Session-Id

    • Acct-Status-Type

    • Service-Type

    • Acct-Authentic

    • User-Name

    • NAS-IP-Address

    • NAS-Identifier

    • NAS-Port-Type

    • Calling-Station-Id

    • HP-Command-String

    • Acct-Delay-Time

  • RADIUS accounting with IP attribute:

    The RADIUS Attribute 8 (Framed-IP-Address) feature provides the RADIUS server with information about the client's IP address after the client is authenticated. DHCP snooping is queried for the IP address of the client, so DHCP snooping must be enabled for the VLAN of which the client is a member.

    When the switch begins communications with the RADIUS server it sends the IP address of the client requesting access to the RADIUS server as RADIUS Attribute 8 (Framed-IP-Address) in the RADIUS accounting request. The RADIUS server can use this information to build a map of usernames and addresses.

    It may take a minute or longer for the switch to learn the IP address and then send the accounting packet with the Framed-IP-Address attribute to the RADIUS server. If the switch does not learn the IP address after a minute, it sends the accounting request packet to the RADIUS server without the Framed-IP-Address attribute. If the IP address is learned at a later time, it will be included in the next accounting request packet sent.

The switch forwards the accounting information it collects to the designated RADIUS server, where the information is formatted, stored, and managed by the server. For more information on this aspect of RADIUS accounting, see the documentation provided with your RADIUS server.