AAA Authorization Syntax
Christopher Dobkowski
Member Posts: 98 ■■□□□□□□□□
Hi there guys!
I am currently studying for my ccna: security (640-554) exam and got to the point where I'm presented with syntax for enabling AAA authentication - authorization - accounting. I fully grasped the authentication syntax but I have a little fuzz going on about the authorization syntax. To be more specific:
R1(config)# aaa accounting commands 1 TAC-act1 start-stop group tacacs+
R1(config)# aaa accounting commands 15 TAC-act15 start-stop group tacacs+
OK, those commands are created to allow users with privilege level 1 and 15 to get authenticated by the tacacs+ server. What I can't grasp and find what it is, is the "start-stop" part.
I am currently studying for my ccna: security (640-554) exam and got to the point where I'm presented with syntax for enabling AAA authentication - authorization - accounting. I fully grasped the authentication syntax but I have a little fuzz going on about the authorization syntax. To be more specific:
R1(config)# aaa accounting commands 1 TAC-act1 start-stop group tacacs+
R1(config)# aaa accounting commands 15 TAC-act15 start-stop group tacacs+
OK, those commands are created to allow users with privilege level 1 and 15 to get authenticated by the tacacs+ server. What I can't grasp and find what it is, is the "start-stop" part.
Comments
-
QHalo
Member Posts: 1,488
Start-stop refers to sessions run by the user. Start-stop immediately sends the record when a session is begun.
AAA Accounting Setup > Securing the Corporate Network
Table 10-7 -
Christopher Dobkowski
Member Posts: 98 ■■□□□□□□□□
So it's like to inform you that someone was successfully authorized on one of the routers (someone began a session).
And when he's finished (logs out), you will receive a second log compilation of what he did and the commands he issued.
Is that correct?