Cisco N5010P-N2K-BE, Software Configuration Manual

Page: 252 / 704

S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
16-12
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01
Chapter 16 Configuring AAA
Displaying and Clearing the Local AAA Accounting Log
•
accountinginfo—Stores additional accounting information in addition to the attributes covered by a
standard RADIUS accounting protocol. This attribute is sent only in the VSA portion of the
Account-Request frames from the RADIUS client on the switch, and it can only be used with the
accounting protocol-related PDUs.
Specifying Cisco Nexus 5000 Series Switch User Roles and SMNPv3 Parameters on AAA Servers
You can use the VSA cisco-av-pair on AAA servers to specify user role mapping for the Nexus 5000
Series switch using this format:
shell:roles="roleA roleB …"
If you do not specify the role option in the cisco-av-pair attribute, the default user role is
network-operator.
You can also specify your SNMPv3 authentication and privacy protocol attributes as follows:
shell:roles="roleA roleB..." snmpv3:auth=SHA priv=AES-128
The SNMPv3 authentication protocol options are SHA and MD5. The privacy protocol options are
AES-128 and DES. If you do not specify these options in the cisco-av-pair attribute, MD5 and DES are
the default authentication protocols.
For more information on user roles, see Chapter 22, “Configuring User Accounts and RBAC.”
Displaying and Clearing the Local AAA Accounting Log
The Nexus 5000 Series switch maintains a local log for the AAA accounting activity. To display this log
and clear it, perform this task:
Note
The accounting log feature does not log the show commands, For example, the feature does not log the
show version or show module commands.
Command Purpose
Step 1
switch# show accounting log [ size ]
[ start-time year month day hh : mm : ss ]
Displays the accounting log contents. By default,
the command output contains up to 250,000 bytes of
the accounting log. You can use the size argument to
limit command output. The range is from 0 to
250000 bytes. You can also specify a start time for
the log output.
Step 2
switch# clear accounting log
(Optional) Clears the accounting log contents.