DES-7200 Configuration Guide Chapter 1 AAA Configuration
1-23
Command Function
aaa authentication network {default |
list-name}
group radius
Define RADIUS authentication method.
1.4.5.2 Example of Configuring
Network Authorization
The example below illustrates how to configure network authorization.
DES-7200# configure terminal
DES-7200(config)# aaa new-model
DES-7200(config)# radius-server host 192.168.217.64
DES-7200(config)# radius-server key test
DES-7200(config)# aaa authorization network test group radius local
DES-7200(config-line)# end
DES-7200(config)# show running-config
!
aaa new-model
!
aaa authorization network test group radius none
!
radius-server host 192.168.217.64
radius-server key 7 093b100133
!
1.5 Configuring Accounting
The AAA accounting function enables you to trace the services and network resources
used by the user. After the accounting function is enabled, the network access server or
router sends the user's network accesses to the Radius security server by means of
attribute pair. You may use some analysis software to analyze these data to implement the
billing, audition and tracing function for the user's activities.
1.5.1 Accounting Types
Our product currently supports the following accounting types:
z Exec Accounting -- record the accounting information of entering to and exiting from the
CLI of the user terminal logged in the NAS CLI.
z Command Accounting – record the specific command execution information after the
user terminal loggs in the NAS CLI.
z Network Accounting – records the related information on the user session in the
network.
Note
Only TACACS+ supports the command accounting function. For the detailed
information, please refer to TACACS+ Configuration.