Foundry Networks Switch and Router, Руководство по установке и настройке

Страница: 84 / 1070

Foundry Switch and Router Installation and Configuration Guide
3 - 20 December 2000
When command authorization takes place, the following events occur:
1. A Telnet, SSH, or Web management interface user previously authenticated by a server enters a
command on the Foundry device.
2. The Foundry device looks at its configuration to see if the command is at a privilege level that requires
command authorization.
3. If the command belongs to a privilege level that requires authorization, the Foundry device consults the
server to see if the user is authorized to use the command.
4. If the user is authorized to use the command, the command is executed.
Accounting
accounting works as follows:
1. One of the following events occur on the Foundry device:
• A user logs into the management interface using Telnet or SSH
• A user enters a command for which accounting has been configured
• A system event occurs, such as a reboot or reloading of the configuration file
2. The Foundry device checks its configuration to see if the event is one for which accounting is
required.
3. If the event requires accounting, the Foundry device sends a Accounting Start packet to
the accounting server, containing information about the event.
4. The accounting server acknowledges the Accounting Start packet.
5. The accounting server records information about the event.
6. When the event is concluded, the Foundry device sends an Accounting Stop packet to the
accounting server.
7. The accounting server acknowledges the Accounting Stop packet.
AAA Operations for TACACS/
The following table lists the sequence of authentication, authorization, and accounting operations that take place
when a user gains access to a Foundry device that has TACACS/ security configured.
User Action Applicable AAA Operations
User attempts to gain access to the
Privileged EXEC and CONFIG levels of
the CLI Enable authentication:
aaa authentication enable default <method-list>
Exec authorization ():
aaa authorization exec default
System accounting start ():
aaa accounting system default start-stop <method-list>