HP PROCURVE 2910AL, Руководство по обеспечению безопасности доступа

Страница: 196 / 594

RADIUS Authentication and Accounting
Configuring RADIUS Accounting
The radius-server command as shown in figure 5-11, above, configures the
switch to use a RADIUS server at IP address 10.33.18.151, with a (non-default)
UDP accounting port of 1750, and a server-specific key of “source0151”.
2. Configure Accounting Types and the Controls for
Sending Reports to the RADIUS Server
Select the Accounting Type(s):
■ Exec: Use exec if you want to collect accounting information on login
sessions on the switch via the console, Telnet, or SSH. (See also
“Accounting Services” on page 5-4.)
■ System: Use system if you want to collect accounting data when:
• A system boot or reload occurs
• System accounting is turned on or off
Note that there is no time span associated with using the
system
option.
It simply causes the switch to transmit whatever accounting data it
currently has when one of the above events occurs.
■ Network:
Use Network if you want to collect accounting information
on 802.1X port-based-access users connected to the physical ports on
the switch to access the network. (See also “Accounting Services” on
page 4.)
■ Commands: When commands authorization is enabled, a record
accounting notice is sent after the execution of a command.
■ Web or MAC : You can also use Web or MAC to collect accounting
information.
Determine how you want the switch to send accounting data to a RADIUS
server:
■ Start-Stop:
• Send a start record accounting notice at the beginning of the account­
ing session and a stop record notice at the end of the session. Both
notices include the latest data the switch has collected for the
requested accounting type (Network, Exec, Commands, or System).
• Do not wait for an acknowledgement.
The system option (page 5-40) ignores
start-stop
because the switch sends
the accumulated data only when there is a reboot, reload, or accounting
on/off event.
5-40