Kontrol KSwitch D10 MMT, User Manual, Page: 82 / 110

KSwitch D10 MMT Managed Time Sensitive Ethernet Switch - Preliminary User Guide, Rev. 0.99
www.kontron.com // 82
aaa authentication login { console | telnet | ssh | http } { { local | radius | tacacs } [ { local | radius | tacacs } [ { local |
radius | tacacs } ] ] }
no aaa authentication login
{ console | telnet | ssh | http }
Parameter Description
Parameter N.A N.A
Default N.A
Mode Global Configuration Mode
Usage
Configure user authentication method for a specific management interface. Use the no version
of the command to disable the interface.
Examples
Example#1 (configure SSH to be authenticated 1st by RADIUS Server. In case it is down, then by
TACACS Server, and in case it is also down, then be authenticated locally)
(config)#aaa authentication login ssh radius tacacs localconfig)# aaa authentication login ssh
radius tacacs local
Example#2 (disable Telnet remote access)
(config)# no aaa authentication login telnet
9.6.5.2. aaa Accounting
Description - Configure what type of activity over a specific interface (console, telnet or ssh) is reported to the
accounting server. Possible options are “CLI Commands”, and Exec=Login/Logout.
CLI Commands - every CLI command entered by the user will be mirrored to the accounting server. Exe
(Login/Logout) – every login/logout of remote user will be reported to the accounting server.
aaa accounting { console | telnet | ssh } tacacs { [ commands <priv_lvl> ] [ exec ] }
no aaa accounting { console | telnet | ssh }
Parameter Description
Parameter [commands <priv_lvl> ] All CLI commands equal and above the privilege level are accounted
[ exec ] Only remote user login/logout is reported
Default N.A
Mode Global Configuration Mode
Usage Configure accounting method and reporting. Use the no version of the command to disable
accounting.
Examples Example#1 (configure accounting for ssh to report all CLI activity and any login/logout )
(config)# aaa accounting ssh tacacs commands 15 exec
Example#2 (disable accounting for Telnet)
(config)# no aaa accounting telnet