Creating A Named List To Track When Users Access The Basic Or Enable Mode Context - HP ProCurve 7000dl Series Basic Management And Configuration Manual
Procurve 7000dl series secure router
Hide thumbs
Also See for ProCurve 7000dl Series:
- Quickspecs (18 pages) ,
- Basic management and configuration manual (817 pages)
Table of Contents
Advertisement
Controlling Management Access to the ProCurve Secure Router
Using the AAA Subsystem to Control Management Access
2-28
Configuring accounting involves the following steps:
1.
Create a list to specify which events are tracked by the TACACS+ server.
In this guide and in the SROS Command Line Interface Reference Guide,
this list is called a "named list." You can create named lists to track the
following events:
•
a user accesses the basic or enable mode context
•
a user logs in to the router
•
a user establishes an outbound Telnet session
2.
Apply the named list.
Of course, the AAA subsystem must be enabled, and the TACACS+ server must
be defined. (See "Define the TACACS+ Server" on page 2-35.)
Creating a Named List to Track When Users Access the Basic
or Enable Mode Context
You can create a named list to track which users access the basic or enable
mode context. You can also configure:
which TACACS+ server the information is sent to
when the information is sent
You can use the aaa accounting command to create a named list and specify
its contents. From the global configuration mode context, enter:
Syntax: aaa accounting commands [1 |15] [default | <named list>] [none | stop-only]
[group {tacacs+ | <group name>}]
Specify the level of commands for which you want to generate accounting: 1
is unprivileged access, which is the basic mode, and 15 is privileged access,
which is the enable mode.
Create the default accounting list, or replace <named list> to create an
accounting list with the name you specify.
Include the stop-only option if you want an accounting record to be generated
when the user ends his or her session. Include the none option if you do not
want an accounting record to be generated. If you specify the none option,
you cannot include the group option (because a TACACS+ server is not
required).
- Quick Links:
- Procurve Secure Router
Hide quick links:
Advertisement
Chapters
Table of Contents
Troubleshooting
