AAA Commands
page 43-22 OmniSwitch 6250 CLI Reference Guide November 2009
aaa accounting session
Configures an accounting server or servers for authenticated switch sessions. Accounting servers keep
track of network resources (time, packets, bytes, etc.) and user activity.
aaa accounting session server1 [server2...] [local]
no accounting session
Syntax Definitions
server1 The name of the RADIUS, TACACS+, or LDAP server used for
accounting of authenticated switch sessions. At least one server is
required. RADIUS, TACACS+, and LDAP server names are set up
through the aaa radius-server, aaa tacacs+-server, and aaa ldap-
server commands.
server2... The names of backup servers. Up to 3 backups may be specified (includ-
ing local); each server name should be separated by a space. These
backups are only used if server1 becomes unavailable. They are polled
in the order they are listed in this command. The first available server
becomes the accounting server.
local Local accounting is done through the Switching Logging feature on the
switch. See Chapter 45, “Switch Logging Commands,” for information
about Switch Logging commands.
Defaults
Accounting is disabled by default.
Platforms Supported
OmniSwitch 6250
Usage Guidelines
• Use the no form of the command to disable accounting for Authenticated Switch Access.
• Up to 4 accounting servers (total) may be specified. At least one server is required. Each server name
should be separated by a space.
• The servers may be RADIUS, TACACS+, LDAP servers, and/or the local Switch Logging facility.
• If local is specified as server1, the switch will only use the local Switching Logging facility for
accounting.
• If local is specified as a backup, it should be entered last in the list of servers. The Switch Logging
facility is always available if the switch is up.
• The switch uses only the first available server in the list for accounting. For example, if server1 is not
available, the switch will use server2.
• RADIUS, TACACS+, and LDAP servers may each have an additional backup specified through the
aaa radius-server, aaa tacacs+-server, and aaa ldap-server commands.
To Next Page
Loading...
