To Next Page

To Previous Page

2-28

Controlling Management Access to the ProCurve Secure Router

Using the AAA Subsystem to Control Management Access

Configuring accounting involves the following steps:

1. Create a list to specify which events are tracked by the TACACS+ server.

In this guide and in the SROS Command Line Interface Reference Guide,

this list is called a “named list.” You can create named lists to track the

following events:

• a user accesses the basic or enable mode context

• a user logs in to the router

• a user establishes an outbound Telnet session

2. Apply the named list.

Of course, the AAA subsystem must be enabled, and the TACACS+ server must

be defined. (See “Define the TACACS+ Server” on page 2-35.)

Creating a Named List to Track When Users Access the Basic

or Enable Mode Context

You can create a named list to track which users access the basic or enable

mode context. You can also configure:

■ which TACACS+ server the information is sent to

■ when the information is sent

You can use the aaa accounting command to create a named list and specify

its contents. From the global configuration mode context, enter:

Syntax: aaa accounting commands [1 |15] [default | <named list>] [none | stop-only]

[group {tacacs+ | <group name>}]

Specify the level of commands for which you want to generate accounting: 1

is unprivileged access, which is the basic mode, and 15 is privileged access,

which is the enable mode.

Create the default accounting list, or replace <named list> to create an

accounting list with the name you specify.

Include the stop-only option if you want an accounting record to be generated

when the user ends his or her session. Include the none option if you do not

want an accounting record to be generated. If you specify the none option,

you cannot include the group option (because a TACACS+ server is not

required).

HP ProCurve 7000dl Series User Manual

Questions and Answers: