Dell Force10 MXL Blade - Enable AAA Accounting; Suppress AAA Accounting for Null Username Sessions

474 | Security
www.dell.com | support.dell.com
• Configure AAA Accounting for Terminal Lines (optional)
• Monitor AAA Accounting (optional)
Enable AAA Accounting
To create a record for any or all of the accounting functions monitored, use the aaa accounting command.
To enable AAA accounting, perform the following task in CONFIGURATION mode:
Suppress AAA Accounting for Null Username Sessions
When you activate AAA accounting, the FTOS software issues accounting records for all users on the
system, including users whose username string, because of protocol translation, is NULL. An example of
this is a user who comes in on a line where the AAA authentication
login method-list none command is
applied. To prevent accounting records from being generated for sessions that do not have usernames
associated with them, perform the following task in
CONFIGURATION mode:
Command Syntax Command Mode Purpose
aaa accounting {system | exec | command
level} {default | name} {start-stop |
wait-start | stop-only} {tacacs+}
CONFIGURATION Enable AAA accounting and create a record for
monitoring the accounting function.
The variables are:
•
system—sends accounting information of any
other AAA configuration.
•
exec—sends accounting information when a user
has logged in to the EXEC mode.
• command level—sends accounting of commands
executed at the specified privilege level.
• default | name—Enter the name of a list of
accounting methods.
• start-stop—Use for more accounting information,
to send a start-accounting notice at the beginning
of the requested event and a stop-accounting
notice at the end.
• wait-start—ensures that the TACACS+ security
server acknowledges the start notice before
granting the user's process request.
• stop-only—Use for minimal accounting; instructs
the TACACS+ server to send a stop record
accounting notice at the end of the requested user
process.
• tacacs+ —Designate the security service.
Currently, FTOS supports only TACACS+
Command Syntax Command Mode Purpose
aaa accounting suppress null-username
CONFIGURATION Prevent accounting records from being generated for
users whose username string is NULL