Cisco AS5800 Specifications download pdf (Page 274)

A-14

Cisco AS5800 Operations, Administration, Maintenance, and Provisioning Guide

DOC-7810814=

Appendix A Advanced Quick Reference

Advanced Quick Reference Configurations

Command Line Description

5800(config)# aaa authorization exec USE-RADIUS group radius if-authenticated

Configures an authorization method list called USE-RADIUS that uses the global RADIUS server list.

EXEC authorization is required to process per-user attribute such as autocommands. Defines the

authorization method for EXEC (shell). Method list is called “USE-RADIUS” and it points to the radius

server. If the radius server does not respond, the user, if authenticated, is automatically authorized due

to the “if-authenticated” option.

5800(config)# aaa authorization exec USE-TACACS group tacacs+ if-authenticated

Configure an authorization method list called USE-TACACS that uses the global TACACS+ server list.

EXEC authorization is required to process per-user attribute such as autocommands. Defines the

authorization method for EXEC (shell). Method list is called “USE-TACACS” and it points to the

TACACS+ server. If the TACACS+ server does not respond, the user, if authenticated, is automatically

authorized due to the “if-authenticated” option.

5800(config)# aaa authorization network default radius if-authenticated

Defines the authorization method for network services (PPP, SLIP, ARAP). Method list is called

“default” and it points to the radius server. If the radius server does not respond the user, if already

authenticated, will be automatically authorized due to the “if-authenticated” option.

5800(config)# aaa authorization network USE-RADIUS group radius if-authenticated

Defines the authorization method for network services (PPP, SLIP, ARAP). Method list is called

“USE-RADIUS” and it points to the radius server. If the radius server does not respond the user, if

already authenticated, will be automatically authorized due to the “if-authenticated” option.

To Modify, Copy, & Paste

aaa authorization exec USE-RADIUS group radius if-authenticated

aaa authorization exec USE-TACACS group tacacs+ if-authenticated

aaa authorization network default radius if-authenticated

aaa authorization network USE-RADIUS group radius if-authenticated

AAA Accounting Configuration

The following Cisco IOS CLI script serves as a sample AAA accounting configuration or setup.

Sample Configuration

5800(config)# aaa accounting suppress null-username

5800(config)# aaa accounting exec default start-stop group radius

5800(config)# aaa accounting network default start-stop group radius

5800(config)# aaa accounting system default start-stop group radius

Command Line Description

5800(config)# aaa accounting suppress null-username

Do not generate accounting records for users with a null-username.

5800(config)# aaa accounting exec default start-stop group radius

Generates accounting records for EXEC (shell) service. Start and Stop records should be generated

without wait. Radius server is being used for this accounting. This enables accounting records for all

EXEC sessions. The accounting record will be sent at the beginning and the end of the EXEC session.

The record will be sent to the global RADIUS server list.

1 2 ... 269 270 271 272 273 274 275 276 277 278 279 ... 333 334

Cisco AS5800 Specifications Page 274

Comments to this Manuals

Cisco AS5800 Specifications Page 274

Comments to this Manuals

Related products and manuals for Servers Cisco AS5800