Filter
Top Products
DES-7200 Configuration Guide Chapter 1 AAA Configuration
1-24
1.5.2 Preparations for
Accounting
The following tasks must be completed before the AAA accouting is configured:
z Enable the AAA server. For the details, see AAA Overview.
z Define the security protocol parameters. It is required to configure the security protocol
parameters for accouting. The network accounting only supports RADIUS; the Exec
accounting supports RADIUS and TACACS+; the Command accounting supports
TACACS+ only. For details of the RADIUS, see Configuring RADIUS. For details of the
TACACS+, see Configuring TACACS+.
z (Optional) Configure the AAA authentication. The accounting is done after the user
passes the authentication(for example, Exec accounting). In some circumstances, the
accouting can also be done without authentication. For details of the AAA authentication,
see Configuring Authentication.
1.5.3 Configuring AAA
Exec Accounting
The exec accounting records the information of entering to and exiting from the CLI of the
user terminal logged in the NAS. When the user terminal loggs in and enters to the NAS
CLI, it sends the accounting start information to the security server. When the user
terminal exits from the CLI, it sends the accounting stop information to the server.
Caution
Only after the user terminal logged in the NAS has passed the login
authentication, the exec accounting starts. If no login authentication or none
authentication method has been configured, no exec accounting processes.
For the same user terminal, if it sends no accounting start information to the
security server when logging in, no accounting stop information will be sent
when logging out.
To configure the AAA Exec accounting, run the following commands in the global
configuration mode:
Command Function
configure terminal
Enter the global configuration mode.
aaa new-model
Turn on the AAA switch.
aaa accounting exec
network{default | list-name}
start-stop method1 [method2|…]
Define the AAA Exec accounting method list. If
you need to define multiple method lists,
execute this command repeatedly.
line vty line-num
Enter the line to which the AAA Exec accounting
is applied.
accounting exec {default | list-name}
Apply the method list to the line.