Allen-Bradley 1783-WAPAK9, Руководство пользователя

Страница: 438 / 612

438 Rockwell Automation Publication 1783-UM006A-EN-P - May 2014
Chapter 14 Configuring RADIUS and Servers
Beginning in privileged EXEC mode, follow these
steps to specify authorization for
privileged EXEC access and network services:
1.
Enter global configuration mode.
configure terminal
2.
Configure the access point for administrator authorization for
all network-related service requests.
aaa authorization network
3.
Configure the access point for administrator authorization to
determine if the administrator has privileged EXEC access.
The
exec
keyword can return user profile information (such as
autocommand
information).
aaa authorization exec
4.
Return to privileged EXEC mode.
end
5.
Verify your entries.
show running-config
6.
(Optional) Save your entries in the configuration file.
copy running-config startup-config
To disable authorization, use the
no aaa authorization {network |
exec} method1
global configuration command.
Starting Accounting
The AAA accounting feature tracks the services that administrators are accessing
and the amount of network resources that they are consuming. When AAA
accounting is enabled, the access point reports administrator activity to the
security server in the form of accounting records. Each accounting
record contains accounting attribute-value (AV) pairs and is stored on the
security server. This data can then be analyzed for network management, client
billing, or auditing.
Beginning in privileged EXEC mode, follow these steps to enable
accounting for each Cisco IOS privilege level and for network services:
1.
Enter global configuration mode.
configure terminal
2.
Enable accounting for all network-related service requests.
aaa accounting network start-stop