Filter
Top Products
238 AAA Commands
support the concept of time-out, subsequent entries in the list are never
attempted. For example, the local authentication method implementation
does not supply a time-out value. If a list contains the local method, followed
by the radius authentication method, the radius method is not attempted.
Once an APL is created, a reference to that APL can be stored in the access
line configuration to determine how specific components should
authenticate users. The APL and associated component ID are stored
together. A single APL can be referenced by multiple users and components.
The administrator can enable/disable/reorder authentication methods on a
per method basis (see above).
TACACS+ Accounting
The administrator may choose to account user activity on the switch. The
following accounting types are supported:
• User exec sessions: User login and logout times are noted and conveyed to
an external AAA server.
• User executed commands: Commands executed by the user and the time
of execution are accounted and conveyed to an external AAA server.
User activity can be accounted for at the end and/or at the beginning of the
activity. For this purpose, the following record-types are defined:
• Start-stop
Accounting notifications are sent when the user logs into the switch and
when the user logs out of the exec mode. Accounting notifications are also
sent at the beginning and at the end of the user executed command.
Command execution does not wait for the accounting notification to be
recorded at the AAA server.
•Stop-only
Accounting notification is sent when user logs out of the exec mode. The
duration of the exec session is mentioned in the accounting notice.
Accounting notifications are sent at the end of each user executed
command. In the case of commands like
reload
, and
clear config
, an
exception is made and the stop accounting notice is sent at the beginning
of the command.
2CSPC4.X8100-SWUM102.book Page 238 Friday, March 15, 2013 8:56 AM