
Publication date: Feb., 2012
Revision A1
- 11 -
AAA
This section shows you to use an AAA (Authentication, Authorization,
Accounting) server to provide access control to your network. The AAA
server can be a TACACS+ or RADIUS server to create and manage objects
thatcontainsettingsforusingAAAservers.
Table1:AAACommandsinCLI
Command
Function
acc-radius
Configure RADIUS accounting Server
accounting
Configure Accounting mode
authorization
Configure Authorization mode
deadtime
Configure server dead time
fallback-author
Configure Authorization mode
radius
Configure RADIUS authentication server
show
Show AAA information
tacacs+
Configure TACACS+ authentication server
timeout
Configure server response timeout
acc‐radius: ThecommandletsyouconfiguretheRADIUS
accountingserverparameter.
Syntax:
acc-radius <index> <enable/disable> <ip-hostname> <0-65535>
<Line>
Parameter :
<index> The RADIUS accounting Server index. The available value is from
1 to 5
<disable/enable> To enable or disable the RADIUS accounting service.
<ip-hostname> The RADIUS accounting server IP address or hostname.
<0-65535> The RADIUS accounting server UDP port. If the port is set to 0
(zero), then the default port (1813) is used.
<LINE> Secret shared with external accounting server. The Available value
is up to 29 characters long.
EXAMPLE:
Switch(aaa)# acc-radius 1 enable 192.168.2.22 65535 radius
Switch(aaa)# show config
Server Timeout : 15 seconds
Server Dead Time : 300 seconds
TACACS+ Authorization and Accounting Configuration:
Authorization : Disable
Fallback to Local Authorization: Disable
Accounting : Disable
Comentarios a estos manuales