Allied Telesis AT-9000/28POE Switch User Manual


  Open as PDF
of 1480
 
Chapter 88: RADIUS and TACACS+ Clients
1368
This example sets the RADIUS timeout to 15 seconds:
awplus> enable
awplus# configure terminal
awplus(config)# radius-server timeout 15
Specifying
RADIUS
Accounting
To specify RADIUS accounting for all shell login sessions, use the AAA
ACCOUNTING LOGIN command in the Global Configuration mode. Here
is the format of the command:
aaa accounting login default start-stop|stop-only|none
group
radius|tacacs [local]
The DEFAULT parameter indicates the default accounting method list.
The START-STOP parameter indicates a start accounting message is
sent at the beginning of a session, and a stop accounting message is sent
at the end of the session.
The STOP-ONLY parameter indicates a stop accounting message is sent
at the end of the session.
The NONE parameter disables accounting messages.
The GROUP parameter indicates the user server group. Specify the
RADIUS server.
The LOCAL parameter indicates that if the first attempt to authenticate a
user with the RADIUS server fails, the authentication process fails, and
the user is approved to access the switch with the local name and
password.
This example configures RADIUS accounting for all login shell sessions to
send a start accounting message at the beginning of a session and a stop
accounting message at the end of the session:
awplus> enable
awplus# configure terminal
awplus(config)# aaa accounting login default start-stop
group radius
Removing the
Accounting
Method List
To reset the configuration of the default accounting list for login shell
sessions, use the NO AAA ACCOUNTING LOGIN DEFAULT command.
This command causes the switch to revert to the authentication method
used by the local user database:
awplus> enable
awplus# configure terminal
awplus(config)# no aaa accounting login default