Dell PowerConnect B-FCXs, Configuration Manual

Page: 1211 / 1494

PowerConnect B-Series FCX Configuration Guide 1169
53-1002266-01
Configuring TACACS/ security
32
AAA security for commands pasted into the running-config
If AAA security is enabled on the device, commands pasted into the running-config are subject to
the same AAA operations as if they were entered manually.
When you paste commands into the running-config, and AAA command authorization or
accounting, or both, are configured on the device, AAA operations are performed on the pasted
commands. The AAA operations are performed before the commands are actually added to the
running-config. The server performing the AAA operations should be reachable when you paste the
commands into the running-config file. If the device determines that a pasted command is invalid,
AAA operations are halted on the remaining commands. The remaining commands may not be
executed if command authorization is configured.
TACACS/ configuration considerations
•
You must deploy at least one TACACS/ server in your network.
•
Dell PowerConnect devices support authentication using up to eight TACACS/ servers.
The device tries to use the servers in the order you add them to the device configuration.
•
You can select only one primary authentication method for each type of access to a device (CLI
through Telnet, CLI Privileged EXEC and CONFIG levels). For example, you can select
as the primary authentication method for Telnet CLI access, but you cannot also select RADIUS
authentication as a primary method for the same type of access. However, you can configure
backup authentication methods for each access type.
User logs out of Telnet/SSH session Command accounting ():
aaa accounting commands
<privilege-level> default start-stop
<method-list>
EXEC accounting stop ():
aaa accounting exec default start-stop
<method-list>
User enters system commands
(for example, reload, boot system) Command authorization ():
aaa authorization commands
<privilege-level> default <method-list>
Command accounting ():
aaa accounting commands
<privilege-level> default start-stop
<method-list>
System accounting stop ():
aaa accounting system default start-stop
<method-list>
User enters the command:
[
no
]
aaa accounting system default
start-stop <method-list>
Command authorization ():
aaa authorization commands
<privilege-level> default <method-list>
Command accounting ():
aaa accounting commands
<privilege-level> default start-stop
<method-list>
System accounting start ():
aaa accounting system default start-stop
<method-list>
User enters other commands Command authorization ():
aaa authorization commands
<privilege-level> default <method-list>
Command accounting ():
aaa accounting commands
<privilege-level> default start-stop
<method-list>
User action Applicable AAA operations