HP HP ProCurve Series 6600, Access Security Manual

Page: 296 / 778

6-62
RADIUS Authentication, Authorization, and Accounting
Accounting Services
■ Network: Use
network
if you want to collect accounting information
on 802.1X port-based-access to the network by users connected to the
physical ports on the switch. (See also “Accounting Service Types” on
page 6-61.) For information on this feature, refer to the chapter titled
“Configuring Switch Ports as 802.1X Authenticators” in the
Access
Security Guide for your switch.
■ Commands:
When commands accounting is enabled, an accounting
notice record is sent after the execution of each command.
Accounting Controls. These options are enabled separately, and define
how the switch will send accounting data to a RADIUS server:
■ Start-Stop: Applies to the
exec
,
network
, and
system
accounting
service types:
• Send a “start record accounting” notice at the beginning of the
accounting session and a “stop record notice” at the end of the
session. Both notices include the latest data the switch has collected
for the requested accounting type.
• Do not wait for an acknowledgement.
■ Stop-Only:
Applies to the network , exec , system , and command service
types, as described below:
• Send a stop record accounting notice at the end of the accounting
session. The notice includes the latest data the switch has collected
for the requested accounting type (
network
,
exec
, or
system
service
types). For the
commands
service type, sends the “Stop” accounting
notice after execution of each CLI command.
• Do not wait for an acknowledgment.
■ Interim-Update: Applies only to the command service type, and is
intended for use when the optional common session ID is configured.
Enabling interim-update in this case results in the command
accounting records appearing as enclosed sub-parts of the exec
service type record for a given management session. (Using interim-
update when the
unique session ID is configured has no effect because
in this case, the different service types appear as separate accounting
processes with separate Acct-Session-ID values.