Ruijie RG-S2900G-E Series - Page 469

Configuration Guide AAA Configuration
Accounting Types
Our product currently supports the following accounting types:
 Exec Accounting -- record the accounting information of entering to and exiting from the
CLI of the user terminal logged in the NAS CLI.
 Command Accounting – record the specific command execution information after the
user terminal loggs in the NAS CLI.
 Network Accounting – records the related information on the user session in the
network.
Note
Only TACACS+ supports the command accounting function. For the detailed
information, please refer to TACACS+ Configuration.
Preparations for Accounting
The following tasks must be completed before the AAA accouting is configured:
 Enable the AAA server. For the details, see AAA Overview.
 Define the security protocol parameters. It is required to configure the security protocol
parameters for accouting. The network accounting only supports RADIUS; the Exec
accounting supports RADIUS and TACACS+; the Command accounting supports
TACACS+ only. For details of the RADIUS, see Configuring RADIUS. For details of the
TACACS+, see Configuring TACACS+.
 (Optional) Configure the AAA authentication. The accounting is done after the user
passes the authentication(for example, Exec accounting). In some circumstances, the
accouting can also be done without authentication. For details of the AAA authentication,
see Configuring Authentication.
Configuring AAA Exec Accounting
The exec accounting records the information of entering to and exiting from the CLI of the user
terminal logged in the NAS. When the user terminal loggs in and enters to the NAS CLI, it
sends the accounting start information to the security server. When the user terminal exits from
the CLI, it sends the accounting stop information to the server.
Caution
Only after the user terminal logged in the NAS has passed the login
authentication, the exec accounting starts. If no login authentication or none
authentication method has been configured, no exec accounting processes.
For the same user terminal, if it sends no accounting start information to the
security server when logging in, no accounting stop information will be sent
when logging out.
To configure the AAA Exec accounting, run the following commands in the global configuration
mode: