Orion A10E - Configuring TACACS+ Accounting; Configuring TACACS+ Authorization

Orion Networks
A10E/A28E/A28F Configuration Guide
6 Security
Orion Networks
172
Step
Configuration
Description
7
Alpha-A28E#user login
{ local-tacacs | local-
user | tacacs-local
[ server-no-response ] |
tacacs-user }
Configure users performing login
authentication through TACACS+.
8
Alpha-A28E#enable login
{ local-tacacs | local-
user | tacacs-local
[ server-no-response ] |
tacacs-user }
Set the authentication mode for user entering
privileged EXEC mode to TACACS+.
6.5.5 Configuring TACACS+ accounting
Configure TACACS+ accounting for the A10E/A28E as below.
Step
Configuration
Description
1
Alpha-A28E#config
Enter global configuration mode.
2
Alpha-
A28E(config)#interface ip
if-number
Enter Layer 3 interface configuration mode.
3
Alpha-A28E(config-ip)#ip
address ip-address [ ip-
mask ] [ vlan-list ]
Configure an IPv4 address.
4
Alpha-A28E(config-ip)#end
Return to privileged EXEC mode.
5
Alpha-A28E#aaa accounting
login enable
Enable TACACS+ accounting.
6
Alpha-A28E#tacacs
[ backup ] accounting-
server ip-address
Assign IP address and UDP port ID for
TACACS+ accounting server.
7
Alpha-A28E#tacacs-server
key string
Configure the shared key to communicate
with the TACACS+ accounting server.
8
Alpha-A28E#aaa accounting
fail { offline | online }
Configure the processing policy for
accounting failure.
9
Alpha-A28E#aaa accounting
update period
Configure the period for sending accounting
update packets. If configured as 0, no
accounting update packet is sent.
6.5.6 Configuring TACACS+ authorization
Configure the A10E/A28E as below.
Step
Configuration
Description
1
Alpha-A28E#tacacs
authorization enable
Enable TACACS+ authorization server.