A user reports that the RADIUS accounting packets are not being seen on the Cisco ISE server. Which command is the user missing in the switch's configuration?

Question

Options

• Aradius-server vsa send accounting
• Baaa accounting network default start-stop group radius
• Caaa accounting resource default start-stop group radius
• Daaa accounting exec default start-stop group radios

• A
  7% (3)
• B
  87% (39)
• C
  2% (1)
• D
  4% (2)

Explanation

The command 'aaa accounting network default start-stop group radius' is required on the switch to enable RADIUS accounting for network access sessions. Without this command, the switch will perform authentication but will never send Start and Stop accounting records to the ISE server. 'start-stop' means a Start record is sent when a session begins and a Stop record when it ends, giving ISE full session tracking data. Option A ('radius-server vsa send accounting') enables sending Vendor-Specific Attributes in accounting packets but is not the primary trigger for sending accounting packets. Option C is for resource accounting, and option D contains a typo ('radios') and refers to EXEC session accounting, not network session accounting.

No community discussion yet for this question.