Configuration Guide Configuring AAA
default: With this parameter used, the configured method list will be defaulted.
list-name: Indicates the name of an EXEC accounting method list in characters.
method: Indicates authentication methods from none and group. A method list contains up to four methods.
none: Indicates that EXEC accounting is not performed.
group: Indicates that a server group is used for EXEC accounting. Currently, the RADIUS and TACACS+
server groups are supported.
Global configuration mode
The RGOS enables EXEC accounting only when login authentication is completed. EXEC accounting is not
performed if login authentication is not performed or the none authentication method is used.
After accounting is enabled, when a user logs in to the CLI of the NAS, the NAS sends a start-accounting
message to the security server. When the user logs out, the NAS sends a stop-accounting message to the
security server. If the NAS does not send a start-accounting message when the user logs in, the NAS will
not send a stop-accounting message when the user logs out.
After you configure EXEC accounting methods, apply the methods to the VTY lines that require EXEC
accounting; otherwise, the methods will not take effect.
 Defining a Method List of Command Accounting
aaa accounting commands level { default | list-name } start-stop method1 [ method2...]
level: Indicates the command level for which accounting will be performed. The value ranges from 0 to 15.
After a command of the configured level is executed, the accounting server records related information
based on the received accounting packet.
default: With this parameter used, the configured method list will be defaulted.
list-name: Indicates the name of a command accounting method list in characters.
method: Indicates authentication methods from none and group. A method list contains up to four methods.
none: Indicates that command accounting is not performed.
group: Indicates that a server group is used for command accounting. Currently, the TACACS+ server
group is supported.
Global configuration mode
The RGOS enables command accounting only when login authentication is completed. Command
accounting is not performed if login authentication is not performed or the none authentication method is
used. After accounting is enabled, the NAS records information about the commands of the configured level
that users run and sends the information to the security server.
After you configure command accounting methods, apply the methods to the VTY lines that require
command accounting; otherwise, the methods will not take effect.
 Defining a Method List of Network Accounting
aaa accounting network { default | list-name } start-stop method1 [ method2...]
default: With this parameter used, the configured method list will be defaulted.
To Next Page
Loading...
Need help?
General
