Dell BigIron RX Series, Configuration Manual

Page: 172 / 1458

96 BigIron RX Series Configuration Guide
53-1002253-01
Configuring TACACS and security
4
•
4 – Records commands available at the Port Configuration level (port-config and read-only
commands)
•
5 – Records commands available at the Read Only level (read-only commands)
Configuring accounting for system events
You can configure accounting to record when system events occur on the BigIron RX.
System events include rebooting and when changes to the active configuration are made.
The following command causes an Accounting Start packet to be sent to the accounting
server when a system event occurs, and a Accounting Stop packet to be sent when the system
event is completed.
BigIron RX(config)# aaa accounting system default start-stop
Syntax: aaa accounting system default start-stop radius | | none
Configuring an interface as the source for all TACACS
and packets
You can designate the lowest-numbered IP address configured an Ethernet port, loopback
interface, or virtual interface as the source IP address for all TACACS and packets from
the device. Identifying a single source IP address for TACACS and packets provides the
following benefits:
•
If your TACACS and server is configured to accept packets only from specific links or
IP addresses, you can use this feature to simplify configuration of the TACACS and
server by configuring the Brocade device to always send the TACACS and packets
from the same link or source address.
•
If you specify a loopback interface as the single source for TACACS and packets,
TACACS and servers can receive the packets regardless of the states of individual
links. Thus, if a link to the TACACS and server becomes unavailable but the client or
server can be reached through another link, the client or server still receives the packets, and
the packets still have the source IP address of the loopback interface.
The software contains separate CLI commands for specifying the source interface for Telnet,
TACACS and , and RADIUS packets. You can configure a source interface for one or more
of these types of packets.
To specify an Ethernet, loopback, or virtual interface as the source for all TACACS and
packets from the device, use the following CLI method. The software uses the lowest-numbered IP
address configured on the port or interface as the source IP address for TACACS and
packets originated by the device.
To specify the lowest-numbered IP address configured on a virtual interface as the device’s source
for all TACACS and packets, enter commands such as the following.
BigIron RX(config)# int ve 1
BigIron RX(config-vif-1)# ip address 10.0.0.3/24
BigIron RX(config-vif-1)# exit
BigIron RX(config)# ip tacacs source-interface ve 1
The commands in this example configure virtual interface 1, assign IP address 10.0.0.3/24 to the
interface, then designate the interface as the source for all TACACS and packets from the
device.