Juniper JUNOSE 11.0.X MULTICAST ROUTING, Configuration Manual

Page: 357 / 788

host1(config)# aaa authentication login tac radius enable
3.
Specify the privilege level by defining a methods list that uses for
authentication.
host1(config)# aaa authentication enable default radius enable
4.
Configure vty lines.
host1(config)# line vty 0 4
5.
Apply an authentication list to the vty lines you specified on your router.
host1(config-line)# login authentication tac
Configuring Accounting
Once support is enabled on the router, you can configure
accounting. Perform the following steps:
1.
Specify AAA new model as the accounting method for your router.
host1(config)# aaa new-model
2.
Enable accounting on the router, and configure accounting method
lists. For example:
host1(config)# aaa accounting exec default start-stop
host1(config)# aaa accounting commands 0 listX stop-only
host1(config)# aaa accounting commands 1 listX stop-only
host1(config)# aaa accounting commands 13 listY stop-only
host1(config)# aaa accounting commands 14 default stop-only
host1(config)# aaa accounting commands 15 default stop-only
3.
(Optional) Specify that accounting records are not generated for users without
explicit user names.
host1(config)# aaa accounting suppress null-username
4.
Apply accounting method lists to a console or lines. For example:
host1(config)# line console 0
host1(config-line)# accounting commands 0 listX
host1(config-line)# accounting commands 1 listX
host1(config-line)# accounting commands 13 listY
host1(config-line)# exit
host1(config)# line vty 0 4
host1(config-line)# accounting commands 13 listY
Note that Exec accounting and User Exec mode commands accounting for privilege
levels 14 and 15 are now enabled for all lines and consoles with the creation of their
default method list, as shown in Step 2.
aaa accounting commands
Configuring Support
■ 317
Chapter 9: Configuring