Configuration Guide Configuring AAA
Command accounting
Only the TACACS+ protocol supports command accounting.
Configuration Steps
Enabling AAA
Mandatory.
Run the aaa new-model command to enable AAA.
By default, AAA is disabled.
Defining a Method List of EXEC Accounting
Run the aaa accounting exec command to configure a method list of EXEC accounting.
This configuration is mandatory if you need to configure an EXEC accounting method list (including the configuration of
the default method list).
The default access permission level of EXEC users is the lowest. (Console users can connect to the NAS through the
Console port or Telnet. Each connection is counted as an EXEC user, for example, a Telnet user and SSH user.)
By default, no EXEC accounting method list is configured.
Defining a Method List of Command Accounting
Run the aaa accounting commands command to configure a method list of command accounting.
This configuration is mandatory if you need to configure a command accounting method list (including the configuration
of the default method list).
By default, no command accounting method list is configured. Only the TACACS+ protocol supports command
accounting.
Defining a Method List of Network Accounting
Run the aaa accounting network command to configure a method list of network accounting.
This configuration is mandatory if you need to configure a network accounting method list (including the configuration of
the default method list).
By default, no network accounting method list is configured.
Applying EXEC Accounting Methods to a Specified VTY Line
Run the accounting exec command in line configuration mode to apply EXEC accounting methods to a specified VTY
line.
This configuration is mandatory if you need to apply an EXEC accounting method list to a specified VTY line.
You do not need to run this command if you apply the default method list.
By default, all VTY lines are associated with the default accounting method list.
To Next Page
Loading...
Need help?
General
