Ruijie RG-S2900G-E Series - Page 471

Configuration Guide AAA Configuration
Example of Configuring Exec Accounting
The example below illustrates how to configure exec accounting. The local login authentication
and the Radius exec authorization are used when the user on the vty line 0-4 loggs in. The
access server uses the Radius server with IP address 192.168.217.64 and shared keyword
test. The local username and password are Ruijie
Ruijie# configure terminal
Ruijie(config)# aaa new-model
Ruijie(config)# radius-server host 192.168.217.64
Ruijie(config)# radius-server key test
Ruijie(config)# username Ruijie password Ruijie
Ruijie(config)# aaa authentication login auth local
Ruijie(config)# aaa accouting exec acct start-stop group radius
Ruijie(config)# line vty 0 4
Ruijie(config-line)# login authentication auth
Ruijie(config-line)# accounting exec acct
Ruijie(config-line)# end
Ruijie(config)# show running-config
!
aaa new-model
!
aaa accounting exec acct start-stop group radius
aaa authentication login auth local
!
username Ruijie password Ruijie
!
radius-server host 192.168.217.64
radius-server key 7 093b100133
!
line con 0
line vty 0 4
accounting exec acct
login authentication auth
!
end
Configuring AAA Network Accounting
The network accounting provides the accounting information about user session, including the
packet number, bytes, IP address and username. Now the network accounting only support
RADIUS.
Note
The format of Radius accounting information varies with the Radius security
server. The contents of the account records may also vary with our product
version.
To configure the AAA network accounting, run the following commands in the global
configuration mode: