Cisco Systems OL-16066-01 Network Router User Manual


 
K-93
User Guide for Cisco Security Manager 3.2
OL-16066-01
Appendix K Router Platform User Interface Reference
AAA Policy Page
AAA Page—Accounting Tab
Use the Accounting tab of the AAA page to define the type of accounting services
to enable on the device and the methods to use for each type. Security Manager
supports the following types of accounting:
Connection—Records information about all outbound connections made
from this device.
EXEC—Records information about user EXEC sessions on the devices,
including the username, date, start and stop times, and the IP address.
Command—Records information about the EXEC commands executed on
the device by users with specific privilege levels.
In addition, you use the Accounting page to determine when accounting records
should be generated and whether they should be broadcast to more than one AAA
server.
Prioritized Method List Defines a sequential list of methods to be used when authorizing a user. Enter
the names of one or more AAA server group objects (up to four), or click
Select to display an Object Selectors, page F-593. Use the up and down
arrows in the object selector to define the order in which the selected server
groups should be used.
The device tries initially to authorize users using the first method in the list.
If that method fails to respond, the device tries the next method, and so on,
until a response is received.
If the AAA server group you want is not listed, click the Create button in the
selector to display the AAA Server Group Dialog Box, page F-12. From here
you can define a AAA server group object.
Supported methods include TACACS+, Local, and None.
Note If you select None as a method, it must appear as the last method in
the list.
OK button Saves your changes locally on the client and closes the dialog box.
Note To save your changes to the Security Manager server so that they are
not lost when you log out or close your client, click Save on the
source page.
Table K-40 Command Authorization Dialog Box (Continued)