Accounting in TACACS+

Accounting in TACACS+ works in a fashion fairly similar to how authorization works. Accounting takes place in TACACS+ in the form of various records being sent to the TACACS+ server from the NAS. These records use all the AV pairs described in the preceding section plus many more.

TACACS+ has three main types of accounting records:

  • Start record— Indicates that a service is about to begin. Contains information used in the authorization records as well as other account-specific information.

  • Stop record— Indicates that a service is about to stop or has terminated. Contains information used in the authorization records as well as other account-specific information.

  • Continue record (also known as the Watchdog)— Sent while a ...

Get Network Security Principles and Practices now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.