2-30
Controlling Management Access to the ProCurve Secure Router
Using the AAA Subsystem to Control Management Access
For example, the following command creates the Admin named list and sends
the connection records to the TACACS+ server when the connection is
terminated:
ProCurve (config)# aaa accounting exec Admin stop-only group tacacs+
As another example, the following command creates the Admin named list
and sends the outbound Telnet connection information to the TACACS+
server when the connection is made and when it is terminated:
ProCurve (config)# aaa accounting connection Admin start-stop group tacacs+
Assign the Named List
To assign the accounting named list that you created to a console, Telnet, or
SSH line, you must move to the appropriate line configuration mode context.
If you want to record configuration activities for all Telnet and SSH lines, you
must ensure that you assign the named list to all of the Telnet or SSH lines that
you have enabled. For example, if you have enabled all five Telnet lines, you
must assign the named list to all five lines.
If you have created a named list to track the users who access the basic or
enable mode context, you use the following command to assign the named
list. From the appropriate line configuration mode context, enter:
Syntax: accounting commands [1 | 15] [default | <named list>]
For example, you might create a named list called Account and then assign
it to all of the Telnet lines. You might also include the 15 option because you
want this named list to record information about the commands entered from
the privileged mode. From the global configuration mode context, enter:
ProCurve (config)# line telnet 0 4
ProCurve (config-telnet04)# accounting commands 15 Account
If you have created a named list to track all connections, or logins, or if you
have created a named list to track outbound Telnet connections, you use the
following command to assign the named list. From the appropriate line
configuration mode context (such as the Telnet 0-4 lines), enter:
Syntax: accounting [connection | exec] [default | <named list>]
Include the connection option if you want to track all outbound Telnet
connections made from this line. Include the exec option if you want to track
all login connections made from this line.
To Next Page
Loading...
Need help?
General
