Cisco Nexus 9000 Series - Using RADIUS; Using Syslog

ifName 0 0 1(18) 0 0
SET Hosts
--------------------
0 10.22.27.244
Using RADIUS
The RADIUS protocol is used to exchange attributes or credentials between a head-end RADIUS server and
a client device. These attributes relate to three classes of services:
•
Authentication
•
Authorization
•
Accounting
Authentication refers to the authentication of users for access to a specific device. You can use RADIUS to
manage user accounts for access to a Cisco NX-OS device. When you try to log into a device, Cisco NX-OS
validates you with information from a central RADIUS server.
Authorization refers to the scope of access that you have once you have been authenticated. Assigned roles
for users can be stored in a RADIUS server with a list of actual devices that the user should have access to.
Once the user has been authenticated, the device can then refer to the RADIUS server to determine the access
that the user will have.
Accounting refers to the log information that is kept for each management session in a device. You can use
this information to generate reports for troubleshooting purposes and user accountability. You can implement
accounting locally or remotely (using RADIUS).
This example shows how to display accounting log entries:
switch# show accounting log
Sun May 12 04:02:27 2007:start:/dev/pts/0_1039924947:admin
Sun May 12 04:02:28 2007:stop:/dev/pts/0_1039924947:admin:vsh exited normally
Sun May 12 04:02:33 2007:start:/dev/pts/0_1039924953:admin
Sun May 12 04:02:34 2007:stop:/dev/pts/0_1039924953:admin:vsh exited normally
Sun May 12 05:02:08 2007:start:snmp_1039928528_172.22.95.167:public
Sun May 12 05:02:08 2007:update:snmp_1039928528_172.22.95.167:public:Switchname
The accounting log shows only the beginning and end (start and stop) for each session.Note
Using syslog
The system message logging software saves messages in a log file or directs the messages to other devices.
This feature provides the following capabilities:
•
Logging information for monitoring and troubleshooting
•
Selection of the types of logging information to be captured
•
Selection of the destination of the captured logging information
Cisco Nexus 9000 Series NX-OS Troubleshooting Guide, Release 7.x
106
Troubleshooting Tools and Methodology
Using RADIUS