4 Command Line Interface

AAA Commands

The Authentication, authorization, and accounting (AAA) feature provides the main framework for configuring access control on the switch. The AAA functions require the use of configured RADIUS or TACACS+ servers in the network.

Table 4-33 AAA Commands

Command

Function

Mode

Page

aaa group server

Groups security servers in to defined lists

GC

4-102

 

 

 

 

server

Configures the IP address of a server in a group list

SG

4-103

 

 

 

 

aaa accounting dot1x

Enables accounting of 802.1X services

GC

4-103

 

 

 

 

aaa accounting exec

Enables accounting of Exec services

GC

4-104

 

 

 

 

aaa accounting commands

Enables accounting of Exec mode commands

GC

4-105

 

 

 

 

aaa accounting update

Enables periodoc updates to be sent to the accounting

GC

4-106

 

server

 

 

accounting dot1x

Applies an accounting method to an interface for 802.1X

IC

4-107

 

service requests

 

 

accounting exec

Applies an accounting method to local console, Telnet or

Line

4-107

 

SSH connections

 

 

accounting commands

Applies an accounting method to CLI commands entered

Line

4-108

 

by a user

 

 

aaa authorization exec

Enables authorization of Exec sessions

GC

4-108

 

 

 

 

authorization exec

Applies an authorization method to local console, Telnet or

Line

4-109

 

SSH connections

 

 

show accounting

Displays all accounting information

PE

4-110

 

 

 

 

aaa group server

Use this command to name a group of security server hosts. To remove a server group from the configuration list, enter the no form of this command.

Syntax

[no] aaa group server {radius tacacs+} group-name

radius - Defines a RADIUS server group.

tacacs+ - Defines a TACACS+ server group.

group-name- A text string that names a security server group. (Range: 1-7 characters)

Default Setting

None

Command Mode

Global Configuration

4-102

Page 398
Image 398
Accton Technology ES3528M-SFP manual Aaa group server, AAA Commands Function Mode