Extreme Networks ExtremeWare XOS 11.3, Руководство пользователя

Страница: 334 / 698

Security
ExtremeWare XOS 11.3 Concepts Guide
334
Enabling and Disabling Accounting
After you configure accounting server information, you must enable accounting before the
switch begins transmitting the information. You must enable authentication for accounting
information to be generated. You can enable and disable accounting without affecting the current state
of authentication.
To enable accounting, use the following command:
enable tacacs-accounting
To disable accounting, use the following command:
disable tacacs-accounting
Accounting Configuration Example
This section provides a sample accounting server configuration.
The following example:
●
Configures the primary accounting server
●
Configures the shared secret for the primary accounting server
●
Configures the secondary accounting server
●
Configures the shared secret for the secondary accounting server
●
Enables accounting on the switch
All other settings use the default settings as described earlier in this section or in the ExtremeWare XOS
Command Reference Guide .
configure tacacs-accounting primary server 10.201.31.238 client-ip 10.201.31.85 vr
"VR-Default"
configure tacacs-accounting primary shared-secret purple
configure tacacs-accounting secondary server 10.201.31.235 client-ip 10.201.31.85 vr
"VR-Default"
config tacacs-accounting secondary shared-secret purple
enable tacacs-accounting
To display the accounting server settings, use the
show tacacs
or the
show tacacs-
accounting
command. The following is sample output from the
show tacacs
command:
: enabled
Authorization: enabled
Accounting : enabled
Server Connect Timeout sec: 3
Primary Server:
Server name :
IP address : 10.201.31.238
Server IP Port: 49
Client address: 10.201.31.85 (VR-Default)
Shared secret : purple
Secondary Server:
Server name :
IP address : 10.201.31.235
Server IP Port: 49