19
Default
Command accounting is disabled, and the accounting server does not record executed commands.
Views
User interface view
Default command level
3: Manage level
Usage guidelines
When command accounting is enabled and command authorization is not, every executed command is
recorded on the HWTACACS server.
When both command accounting and command authorization are enabled, only the authorized and
executed commands are recorded on the HWTACACS server.
Examples
# Enable command accounting on VTY 0.
<Sysname> system-view
[Sysname] user-interface vty 0
[Sysname-ui-vty0] command accounting
command authorization
Use
command authorization
to enable command authorization.
Use
undo command authorization
to restore the default.
Syntax
command authorization
undo command authorization
Default
Command authorization is disabled. Logged-in users can execute commands without authorization.
Views
User interface view
Default command level
3: Manage level
Usage guidelines
With command authorization enabled, users can execute only commands authorized by the server.
Examples
# Enable command accounting for VTY 0 so users logging in from VTY 0 can execute only the
commands authorized by the HWTACACS server.
<Sysname> system-view
[Sysname] user-interface vty 0
[Sysname-ui-vty0] command authorization
