Cisco N5010P-N2K-BE, Руководство по настройке программного обеспечения

Страница: 250 / 704

S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
16-10
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01
Chapter 16 Configuring AAA
Configuring AAA
Configuring AAA Accounting Default Methods
The Nexus 5000 Series switch supports and RADIUS methods for accounting. The switches
report user activity to or RADIUS security servers in the form of accounting records. Each
accounting record contains accounting attribute-value (AV) pairs and is stored on the AAA server.
When you activate AAA accounting, the Nexus 5000 Series switch reports these attributes as accounting
records, which are then stored in an accounting log on the security server.
You can create default method lists defining specific accounting methods, which include the following:.
•
RADIUS server group—Uses the global pool of RADIUS servers for accounting.
• Specified server group—Uses a specified RADIUS or server group for accounting.
•
Local—Uses the local username or password database for accounting.
Note
If you have configured server groups and the server groups do not respond, by default the local database
is used for authentication.
Before you configure AAA accounting default methods, configure RADIUS or server groups
as needed.
To configure AAA accounting default methods, perform this task:
Command Purpose
Step 1
switch# configure terminal
Enters configuration mode.
Step 2
switch(config)# aaa accounting default
{
group
group-list |
local
}
Configures default accounting method. One or more
server group names can be specified in a space
separated list.
The group-list argument consists of a
space-delimited list of group names. The group
names are of the following:
• radius —Uses the global pool of RADIUS
servers for accounting.
•
named-group —Uses a named subset of
or RADIUS servers for accounting.
The local method uses the local database for
accounting.
The default method is local, which is used when no
server groups are configured or when all the
configured server group do not respond.
Step 3
switch(config)# exit
Exits configuration mode.