Chapter 9 Configuring Switch-Based Authentication

Controlling Switch Access with RADIUS

 

Command

Purpose

Step 3

 

 

aaa authorization exec radius

Configure the switch for user RADIUS authorization if the user has

 

 

privileged EXEC access.

 

 

The exec keyword might return user profile information (such as

 

 

autocommand information).

Step 4

 

 

end

Return to privileged EXEC mode.

Step 5

 

 

show running-config

Verify your entries.

Step 6

 

 

copy running-config startup-config

(Optional) Save your entries in the configuration file.

 

 

 

To disable authorization, use the no aaa authorization {network exec} method1 global configuration command.

Starting RADIUS Accounting

The AAA accounting feature tracks the services that users are accessing and the amount of network resources that they are consuming. When AAA accounting is enabled, the switch reports user activity to the RADIUS security server in the form of accounting records. Each accounting record contains accounting attribute-value (AV) pairs and is stored on the security server. This data can then be analyzed for network management, client billing, or auditing.

Beginning in privileged EXEC mode, follow these steps to enable RADIUS accounting for each Cisco IOS privilege level and for network services:

 

Command

Purpose

Step 1

 

 

configure terminal

Enter global configuration mode.

Step 2

 

 

aaa accounting network start-stop

Enable RADIUS accounting for all network-related service requests.

 

radius

 

Step 3

 

 

aaa accounting exec start-stop radius

Enable RADIUS accounting to send a start-record accounting notice at

 

 

the beginning of a privileged EXEC process and a stop-record at the end.

Step 4

 

 

end

Return to privileged EXEC mode.

Step 5

 

 

show running-config

Verify your entries.

Step 6

 

 

copy running-config startup-config

(Optional) Save your entries in the configuration file.

 

 

 

To disable accounting, use the no aaa accounting {network exec} {start-stop} method1... global configuration command.

Catalyst 3750-E and 3560-E Switch Software Configuration Guide

9-28

OL-9775-02

 

 

Page 230
Image 230
Cisco Systems 3750E manual Starting Radius Accounting, End Return to privileged Exec mode