accounting-mode

Function

The accounting-mode command configures an accounting mode used by the current accounting scheme.

By default, the non-accounting mode is used for default0, and the RADIUS accounting mode is used for default1 and a user-defined accounting scheme.

Format

accounting-mode { hwtacacs | none | radius }

Parameters

Parameter Description Value
hwtacacs

Indicates Huawei Terminal Access Controller Access Control System (HWTACACS) accounting.

HWTACACS uses TCP as the transport protocol. TCP provides high reliability for accounting information exchange but requires greater cost.

-

none

Indicates that accounting is not performed.

This mode is intended for administrators, or to daily-fee, monthly-fee, and yearly-fee users. Accounting packets are not needed for these users.

-

radius

Indicates Remote Authentication Dial in User Service (RADIUS) accounting.

RADIUS uses UDP as the transport protocol. UDP requires less cost but provides low reliability for accounting information exchange.

In VS mode, this parameter is supported only by the admin VS.

-

Views

Accounting scheme view

Default Level

3: Management level

Task Name and Operations

Task Name Operations
aaa write

Usage Guidelines

Usage Scenario

To ensure operating income, accounting on online users must be performed.

When a user gets online and passes authentication and authorization, accounting on the user is started. When the user gets offline, accounting will stop. A client sends accounting packets that record the online period of users to an accounting server.

At present, accounting is performed on only administrators, such as Telnet and FTP users.

Prerequisites

When the accounting-mode command is used to configure an accounting mode used by a RADIUS or an HWTACACS accounting scheme, you must configure the RADIUS or HWTACACS server template in the system view in advance, specify accounting servers, and apply the template in the user domain view.

Follow-up Procedure

An accounting mode configured in the accounting scheme can be used to perform accounting on users of a domain only after the accounting scheme is bound to the domain.

Example

# Configure the HWTACACS accounting mode for an accounting scheme named scheme1.
<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] accounting-scheme scheme1
[*HUAWEI-aaa-accounting-scheme1] accounting-mode hwtacacs
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >