HP 5120 SI Series

42
Configuring AAA accounting methods for an ISP domain
In AAA, accounting is a separate process at the same level as authentication and authorization. Its
responsibility is to send accounting start/update/end requests to the specified accounting server.
Accounting is not required, and therefore accounting method configuration is optional.
AAA supports the following accounting methods:
• No accounting—The system does not perform accounting for the users.
• Local accounting—Local accounting is implemented on the access device. It is for counting and
controlling the number of concurrent users who use the same local user account; it does not provide
statistics for charging. The maximum number of concurrent users using the same local user account
is set by the access-limit command in local user view.
• Remote accounting—The access device cooperates with a RADIUS server or HWTACACS server
for accounting of users. You can configure local or no accounting as the backup method to be used
when the remote server is not available.
By default, an ISP domain uses the local accounting method.
Before configuring accounting methods, complete the following tasks:
1. For RADIUS or HWTACACS accounting, configure the RADIUS or HWTACACS scheme to be
referenced first. The local and none authentication methods do not require any scheme.
2. Determine the access mode or service type to be configured. With AAA, you can configure an
accounting method for each access mode and service type, limiting the accounting protocols that
can be used for access.
3. Determine whether to configure an accounting method for all access modes or service types.
Follow these steps to configure AAA accounting methods for an ISP domain:
To do… Use the command… Remarks
Enter system view system-view —
Enter ISP domain view domain isp-name —
Enable the accounting optional
feature
accounting optional
Optional
Disabled by default
Specify the default accounting
method for all types of users
accounting default { hwtacacs-scheme
hwtacacs-scheme-name [ local ] | local
| none | radius-scheme
radius-scheme-name [ local ] }
Optional
local by default
Specify the command accounting
method
accounting command
hwtacacs-scheme
hwtacacs-scheme-name
Optional
The default accounting method
is used by default.
Specify the accounting method for
LAN users
accounting lan-access { local | none |
radius-scheme radius-scheme-name
[ local | none ] }
Optional
The default accounting method
is used by default.
Specify the accounting method for
login users
accounting login { hwtacacs-scheme
hwtacacs-scheme-name [ local ] | local
| none | radius-scheme
radius-scheme-name [ local ] }
Optional
The default accounting method
is used by default.