21-56
Catalyst 6000 Family Software Configuration Guide—Releases 6.3 and 6.4
78-13315-02
Chapter 21 Configuring Switch Access Using AAA
Understanding How Accounting Works
In this example, authorization is enabled for enable mode access to the switch for both Telnet
and console connections, authorizing configuration commands:
Console> (enable)
set authorization enable enable deny both
Successfully enabled enable authorization.
Console> (enable)
set authorization commands enable config deny both
Successfully enabled commands authorization.
Console> (enable)
show authorization
Telnet:
-------
Primary Fallback
------- --------
exec: deny
enable: deny
commands:
config: deny
all: - -
Console:
--------
Primary Fallback
------- --------
exec: deny
enable: deny
commands:
config: deny
all: - -
Console> (enable)
Understanding How Accounting Works
These sections describe how the different accounting methods work:
•
Accounting Overview, page 21-56
•
Accounting Events, page 21-57
•
Specifying When to Create Accounting Records, page 21-57
•
Specifying RADIUS Servers, page 21-58
•
Updating the Server, page 21-59
•
Suppressing Accounting, page 21-59
Accounting Overview
You can configure these accounting methods to monitor access to the switch:
•
accounting
•
RADIUS accounting
Accounting allows you to track user activity to a specified host, suspicious connection attempts in the
network, and unauthorized changes to the NAS configuration itself. The accounting information is sent
to the accounting server where it is saved in the form of a record. Accounting information typically
consists of the user’s action and the duration for which the action lasted. You can use the accounting
feature for security, billing, and resource allocation purposes.
