AAA Authorization Syntax

Hi there guys!

I am currently studying for my ccna: security (640-554) exam and got to the point where I'm presented with syntax for enabling AAA authentication - authorization - accounting. I fully grasped the authentication syntax but I have a little fuzz going on about the authorization syntax. To be more specific:

R1(config)# aaa accounting commands 1 TAC-act1 start-stop group tacacs+
R1(config)# aaa accounting commands 15 TAC-act15 start-stop group tacacs+

OK, those commands are created to allow users with privilege level 1 and 15 to get authenticated by the tacacs+ server. What I can't grasp and find what it is, is the "start-stop" part.

Find more posts tagged with

Comments

QHalo

Start-stop refers to sessions run by the user. Start-stop immediately sends the record when a session is begun.

AAA Accounting Setup > Securing the Corporate Network

Table 10-7

Christopher Dobkowski

So it's like to inform you that someone was successfully authorized on one of the routers (someone began a session).
And when he's finished (logs out), you will receive a second log compilation of what he did and the commands he issued.

Is that correct?