Dell Force10 S4810P - Enable Aaa Accounting; Suppress Aaa Accounting for Null Username Sessions

878 | Security
www.dell.com | support.dell.com
• Enable AAA Accounting on page 878 (mandatory)
• Suppress AAA Accounting for null username sessions on page 878 (optional)
• Configure Accounting of EXEC and privilege-level command usage on page 879 (optional)
• Configure AAA Accounting for terminal lines on page 879 (optional)
• Monitor AAA Accounting on page 879 (optional)
Enable AAA Accounting
The aaa accounting command enables you to create a record for any or all of the accounting functions
monitored. To enable AAA accounting, perform the following task in CONFIGURATION mode:
Suppress AAA Accounting for null username sessions
When AAA Accounting is activated, the FTOS software issues accounting records for all users on the
system, including users whose username string, because of protocol translation, is NULL. An example of
this is a user who comes in on a line where the AAA Authentication
login method-list none command is
applied. To prevent accounting records from being generated for sessions that do not have usernames
associated with them, perform the following task in
CONFIGURATION mode:
Command Syntax Command Mode Purpose
aaa accounting {system | exec |
command level} {default | name}
{
start-stop | wait-start | stop-only}
{
tacacs+}
CONFIGURATION Enable AAA Accounting and create a record for
monitoring the accounting function.
The variables are:
• system—sends accounting information of any
other AAA configuration
• exec—sends accounting information when a user
has logged in to the EXEC mode
• command level—sends accounting of commands
executed at the specified privilege level
• default | name—Enter the name of a list of
accounting methods.
• start-stop—Use for more accounting information,
to send a start-accounting notice at the beginning
of the requested event and a stop-accounting
notice at the end.
• wait-start—ensures that the TACACS+ security
server acknowledges the start notice before
granting the user's process request
• stop-only—Use for minimal accounting; instructs
the TACACS+ server to send a stop record
accounting notice at the end of the requested user
process.
• tacacs+ —Designate the security service.
Currently, FTOS supports only TACACS+
Command Syntax Command Mode Purpose
aaa accounting suppress null-username
CONFIGURATION Prevent accounting records from being generated for
users whose username string is NULL