Accounting in TACACS+

Accounting in TACACS+ works in a fashion fairly similar to how authorization works. Accounting takes place in TACACS+ in the form of various records being sent to the TACACS+ server from the NAS. These records use all the AV pairs described in the preceding section plus many more.

TACACS+ has three main types of accounting records:

  • Start record— Indicates that a service is about to begin. Contains information used in the authorization records as well as other account-specific information.

  • Stop record— Indicates that a service is about to stop or has terminated. Contains information used in the authorization records as well as other account-specific information.

  • Continue record (also known as the Watchdog)— Sent while a ...

Get Network Security Principles and Practices now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.