3 Configuring the Switch

Web – Click Security, AAA, TACACS+ Group Settings. Enter the TACACS+ group name, followed by the number of the server, then click Add.

Figure 3-37 AAA TACACS+ Group Settings

CLI – Specify the group name for a list of TACACS+ servers, and then specify the index number of a TACACS+ server to add it to the group.

Console(config)#aaa group server tacacs+ tps-tacacs+

4-102

Console(config-sg-tacacs+)#server 1

4-103

Console(config-sg-tacacs+)#

 

Configuring AAA Accounting

AAAaccounting is a feature that enables the accounting of requested services for billing or security purposes.

Command Attributes

Method Name – Specifies an accounting method for service requests.

The “default” methods are used for a requested service if no other methods have been defined. (Range: 1-255 characters)

The method name is only used to describe the accounting method(s) configured on the specified accounting servers, and do not actually send any information to the servers about the methods to use.

Service Request – Specifies the service as either 802.1X (user accounting) or Exec (administrative accounting for local console, Telnet, or SSH connections).

Accounting Notice – Records user activity from log-in to log-off point.

Group Name - Specifes the accounting server group. (Range: 1-255 characters)

The group names “radius” and “tacacs+” specifies all configured RADIUS and TACACS+ hosts (see “Configuring Local/Remote Logon Authentication” on page 3-53). Any other group name refers to a server group configured on the RADIUS or TACACS+ Group Settings pages.

3-60

Page 110
Image 110
Accton Technology ES3528M-SFP manual Configuring AAA Accounting, AAA TACACS+ Group Settings