display aaa statistics

Function

The display aaa statistics accounting command displays statistics on accounting packets.

The display aaa statistics authentication command displays statistics on authentication packets.

Format

display aaa statistics { authentication | accounting } [ domain domain-name ]

display aaa statistics { authentication | accounting } [ domain domain-name ] slave

display aaa statistics

Parameters

Parameter	Description	Value
authentication	Displays the statistics on authentication packets.	-
accounting	Displays the statistics on accounting packets (only accounting start and accounting stop packets are included, and real-time accounting packets are excluded).	-
domain domain-name	Displays the authentication or accounting packets in a specified domain. domain-name specifies a domain name.	The asterisk (*), question mark (?), or quotation marks ("") cannot be used in a domain name. The value is a string of 1 to 64 case-insensitive characters.
slave	Displays the authentication or accounting packets on slave board.	-

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name	Operations
aaa-access	read

Usage Guidelines

The display aaa statistics command can be used to display the number of PPPoE, IPoE, FTP, SSH, and Telnet users that are on line and the number of all online users.

The AAA module statistics are periodically backed up. After a master/slave switchover is performed, the AAA module statistics before the switchover differ from that after the switchover because the periodical backup time is not reached.

The display aaa statistics command can be used to display the statistics on all authentication or accounting packets in a specified domain. The statistics include those on authentication request packets, authentication success response packets, and authentication failure response packets or accounting request packets, accounting success response packets, and accounting failure response packets..

To collect statistics on authentication or accounting packets for a specific period of time, run the reset aaa statistics command to clear the existing statistics.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display the statistics on accounting request packets in the domain named default1.

<HUAWEI> display aaa statistics accounting domain default1
Domain-name                     : default1                                    
  accounting request              : 9                                            
  accounting response success     : 9                                            
  accounting response failures    : 0
------------------------------------------------------------------------------

# Display the statistics on authentication request packets in the domain named default1.

<HUAWEI> display aaa statistics authentication domain default1
Domain-name                     : default1                                    
  authentication request          : 15                                           
  authentication response accepts : 0                                            
  authentication response rejects : 15
------------------------------------------------------------------------------

**Table 1** Description of the **display aaa statistics** command output
Item	Description
accounting request	Statistics on accounting request packets. The statistics include those on accounting success response packets and accounting failure response packets.
accounting response success	Statistics on accounting success response packets.
accounting response failures	Statistics on accounting failure response packets.
Domain-name	Statistics on the packets in a specified domain.
authentication request	Statistics on authentication request packets. The statistics include those on authentication success response packets and authentication failure response packets.
authentication response accepts	Statistics on authentication success response packets.
authentication response rejects	Statistics on authentication failure response packets.