Ruijie RG-S2900G-E Series, Руководство по настройке

Страница: 470 / 943

Configuration Guide AAA Configuration
Command Function
configure terminal Enter the global configuration mode.
aaa new-model Turn on the AAA switch.
aaa accounting exec
network { default | list-name}
start-stop
method1 [method2|…
]
Define the AAA Exec accounting method list. If
you need to define multiple method lists,
execute this command repeatedly.
line vty line-num
Enter the line to which the AAA Exec accounting
is applied.
accounting exec { default | list-name } Apply the method list to the line.
The keyword "list-name" is used to name the created accounting method list, which can be any
string. The keyword "method" means the actual algorithm for accounting. Only when the
current method returns ERROR (no reply), the next accounting method will be attempted. If the
current method returns FAIL, no accounting method will be used any more. To make the
accounting return successfully, even if no specified methods reply, it is possible to specific
"none" as the last accounting method.
Note
The keyword "start-stop" is used for the network access server to send the
accounting information at the start and end of the network service to the
security server.
Using the Radius for exec accounting
To configure the use of RADIUS server for Exec acounting, it is required to first configure the
RADIUS server. For the details of the RADIUS server configuration, see Configuring RADIUS .
After configuring the RADIUS server, the RADIUS server-based method list can be configured.
Run the following commands in the global configuration mode:
Command Function
configure terminal
Enter the global configuration mode.
aaa new-model Turn on the AAA switch.
aaa accounting exec
{ default |
list-name }
start-stop group radius
Define RADIUS accounting method.
end
Return to the privileged mode.
show aaa method-list Confirm the configured method list.
configure terminal Enter the global configuration mode.
line vty line-num Enter the line configuration mode.
accounting
exec { default | list-name }
Apply the method list.
end
Return to the privileged mode.
show running-config Confirm the configuration.