H3C S5120-EI Series, Руководство по эксплуатации

Страница: 532 / 1191

1-18
Follow these steps to configure AAA accounting methods for an ISP domain:
To do… Use the command… Remarks
Enter system view
system-view
—
Create an ISP domain and enter
ISP domain view
domain isp-name
Required
Enable the accounting optional
feature
accounting optional
Optional
Disabled by default
Specify the default accounting
method for all types of users
accounting default
{
hwtacacs-scheme
hwtacacs-scheme-name
[
local
] |
local
|
none
|
radius-scheme
radius-scheme-name
[
local
] }
Optional
local
by default
Specify the command accounting
method
accounting command
hwtacacs-scheme
hwtacacs-scheme-name
Optional
The default accounting method is
used by default.
Specify the accounting method for
LAN users
accounting lan-access
{
local
|
none
|
radius-scheme
radius-scheme-name
[
local
] }
Optional
The default accounting method is
used by default.
Specify the accounting method for
login users
accounting login
{
hwtacacs-scheme
hwtacacs-scheme-name
[
local
] |
local
|
none
|
radius-scheme
radius-scheme-name
[
local
] }
Optional
The default accounting method is
used by default.
z
With the
accounting optional
command configured, a user to be disconnected can still use the
network resources even when there is no available accounting server or communication with the
current accounting server fails.
z
The local accounting is not used for accounting implementation, but together with the
attribute
access-limit
command for limiting the number of local user connections. However, with the
accounting optional
command configured, the limit on the number of local user connections is not
effective.
z
The accounting method specified with the
accounting default
command is for all types of users
and has a priority lower than that for a specific access mode.
z
With the
radius-scheme radius-scheme-name local
or
hwtacacs-scheme
hwtacacs-scheme-name local
keyword and argument combination configured, local accounting is
the backup method and is used only when the remote server is not available.
z
If the primary accounting method is
local
or
none
, the system performs local accounting or does
not perform any accounting, and will not use the RADIUS or HWTACACS accounting scheme.
z
In login access mode, accounting is not supported for FTP services.
Configuring Local User Attributes
For local authentication, you need to create local users and configure user attributes on the device as
needed.