Configuring RADIUS
Configuring AAA Accounting
To enable the AAA accounting of requested services for billing or security purposes when using
TACACS+, perform the following steps in global configuration mode:
Command
Step 1
Switch(config)# aaa accounting system
Step 2
Switch(config)# aaa accounting network
Step 3
Switch(config)# aaa accounting connection
Step 4
Switch(config)# aaa accounting exec
Step 5
Switch(config)# aaa accounting commands level Runs accounting for all commands at the
Configuring TACACS Server
Refer to the Security Configuration Guide for details about the TACACS configuration tasks that
include:
•
•
•
Configuring PPP Authentication
Refer to the Dial Solutions Configuration Guide for details about the PPP Authentication configuration
tasks that include:
•
•
Configuring RADIUS
RADIUS is a distributed client/server system that secures networks against unauthorized access.
RADIUS clients run on ATM switch routers and send authentication requests to a central RADIUS server
that contains all user authentication and network service access information. RADIUS is a fully open
protocol, distributed in source code format, that can be modified to work with any security system
currently available.
ATM Switch Router Software Configuration Guide
4-16
Setting the number of login attempts allowed to the TACACS server
Enabling extended TACACS mode
Configuring a TACACS host
Enabling Challenge Handshake Authentication Protocol (CHAP) or Password Authentication
Protocol (PAP)
Enabling an AAA authentication method on an interface
Chapter 4
Configuring System Management Functions
Purpose
Performs accounting for all system-level events
not associated with users, such as reloads.
Runs accounting for all network-related service
requests, including SLIP, PPP, PPP NCPs, and
ARAP.
Runs accounting for outbound Telnet and rlogin.
Runs accounting for Execs (user shells). This
keyword might return user profile information
such as autocommand information.
specified privilege level.
OL-7396-01