When you activate AAA accounting, the Cisco Nexus device reports these attributes as accounting records,
which are then stored in an accounting log on the security server.
You can create default method lists defining specific accounting methods, which include the following:.
•
RADIUS server group
—
Uses the global pool of RADIUS servers for accounting.
•
Specified server group
—
Uses a specified RADIUS or server group for accounting.
•
Local
—
Uses the local username or password database for accounting.
If you have configured server groups and the server groups do not respond, by default, the local database
is used for authentication.
Note
Before You Begin
Before you configure AAA accounting default methods, configure RADIUS or server groups as
needed.
Procedure
Purpose
Command or Action
Enters global configuration mode.
switch#
configure terminal
Step 1
Configures the default accounting method. One or more server
group names can be specified in a space-separated list.
switch(config)#
aaa accounting
default
{
group group-list
|
local
}
Step 2
The
group-list
argument consists of a space-delimited list of
group names. The group names are the following:
•
radius
—
Uses the global pool of RADIUS servers for
accounting.
•
named-group
—
Uses a named subset of or
RADIUS servers for accounting.
The
local
method uses the local database for accounting.
The default method is
local
, which is used when no server
groups are configured or when all the configured server group
do not respond.
Exits configuration mode.
switch(config)#
exit
Step 3
(Optional)
Displays the configuration AAA accounting default methods.
switch#
show aaa accounting
Step 4
(Optional)
Copies the running configuration to the startup configuration.
switch#
copy running-config
startup-config
Step 5
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
19
Configuring AAA
Configuring AAA Accounting Default Methods
