Filter
Top Products
DES-7200 Configuration Guide Chapter 1 AAA Configuration
1-25
The keyword "list-name" is used to name the created accounting method list, which can be any
string. The keyword "method" means the actual algorithm for accounting. Only when the
current method returns ERROR (no reply), the next accounting method will be attempted. If the
current method returns FAIL, no accounting method will be used any more. To make the
accounting return successfully, even if no specified methods reply, it is possible to specific
"none" as the last accounting method.
Note
The keyword "start-stop" is used for the network access server to send the
accounting information at the start and end of the network service to the
security server.
1.5.3.1 Using the Radius for exec
accounting
To configure the use of RADIUS server for Exec acounting, it is required to first configure
the RADIUS server. For the details of the RADIUS server configuration, see Configuring
RADIUS.
After configuring the RADIUS server, the RADIUS server-based method list can be
configured. Run the following commands in the global configuration mode:
Command Function
configure terminal
Enter the global configuration mode.
aaa new-model
Turn on the AAA switch.
aaa accounting exec {default |
list-name}
start-stop group radius
Define RADIUS accounting method.
end
Return to the privileged mode.
show aaa method-list
Confirm the configured method list.
configure terminal
Enter the global configuration mode.
line vty line-num
Enter the line configuration mode.
accounting exec {default | list-name}
Apply the method list.
end
Return to the privileged mode.
show running-config
Confirm the configuration.
1.5.3.2 Example of Configuring Exec
Accounting
The example below illustrates how to configure exec accounting. The local login
authentication and the Radius exec authorization are used when the user on the vty line
0-4 loggs in. The access server uses the Radius server with IP address 192.168.217.64
and shared keyword test. The local username and password are DES-7200
DES-7200# configure terminal