Network Critical SmartNA-X - Monitoring System Health

29
S
MARTNA™ 10G NETWORK ACCESS (SMARTNA-X)
ADMINISTERING SMARTNA-X | ENABLING TRANSACTION LOGGING
DRAFT
Enabling transaction logging
For auditing purposes, all SmartNA-X transactions can be logged to a RADIUS or TACACS+ accounting server.
Local logging is not supported by the system. This section explains how to enable accounting servers using the web
UI and CLI.
Using the web UI to configure accounting servers
1.
Log in to the web UI.
2. Click on the main chassis area to access system management settings.
3. Select the Security tab.
4. Add or edit a RADIUS or TACACS+ accounting server.
For RADIUS servers, specify the following configuration options:
• Server address: Specifies the network address of the accounting server.
• Server port: Specifies the communication port, usually 1813 for accounting servers.
• Shared secret: Specify the password/shared-secret required to access the accounting server. Passwords are
case-sensitive.
For TACACS+ servers, specify the following configuration option:
• Server address: Specify the network address of the accounting server.
To edit an existing server, click the button.
5. Click Add server to finish setting up the server.
6. Add any backup servers employed on your network. You can use the button to drag servers into desired
contact order.
7. Click Review/apply, review the changes you have made, and then click Apply to implement the new settings.
Using the CLI to add accounting servers
1.
Enable the protocol used by the accounting server (RADIUS and TACACS+ protocols are supported):
2. Add a master authentication server and any backups employed by your network.
• To add a RADIUS accounting server:
• To add a TACACS+ accounting server:
3. Exit the CLI in order to apply your changes:
CONTROLLER>set accounting {radius | tacacs}
CONTROLLER>create radius accserver <IP-address> <port-num> <password>
CONTROLLER>create tacacs accserver <IP-address> <password>
CONTROLLER>exit