Establishing a Session with a Device if the AAA Server is Unreachable
To establish a console or telnet session with a device if the AAA server is unreachable, use the following
command in global configuration mode:
PurposeCommand
The aaa accounting system guarantee-first
command guarantees system accounting as the first
record, which is the default condition.
In some situations, users may be prevented from
starting a session on the console or terminal
connection until after the system reloads, which can
take more than three minutes. To resolve this problem,
the no aaa accounting system guarantee-first
command can be used.
Device(config)# no aaa accounting system
guarantee-first
Entering the no aaa accounting system guarantee-first command is not the only condition by which the
console or telnet session can be started. For example, if the privileged EXEC session is being authenticated
by TACACS and the TACACS server is not reachable, then the session cannot start.
Note
Monitoring Accounting
No specific show command exists for either RADIUS or TACACS+ accounting. To obtain accounting records
displaying information about users currently logged in, use the following command in privileged EXEC mode:
PurposeCommand
Allows display of the active accountable events on
the network and helps collect information in the event
of a data loss on the accounting server.
Device# show accounting
Troubleshooting Accounting
To troubleshoot accounting information, use the following command in privileged EXEC mode:
PurposeCommand
Displays information on accountable events as they
occur.
Device# debug aaa accounting
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1027
How to Configure Accounting
To Next Page
Loading...
Need help?
General
