Administrator's Guide v4.1.1 Manual

TACACS+ Accounting Exceptions
● TACACS+ command-accounting limitations................................................................. 725
● Unsupported Network OS command line interface commands.................................... 725
TACACS+ command-accounting limitations
TACACS+ command accounting is subject to the following limitations:
• The TACACS+ command-accounting logs only the Network OS CLI base command name. For
example, if the command executed is secpolicy defined-policy SCC_POLICY+, only the secpolicy
command is logged in the TACACS+ server.
• the no radius-sever command is logged as the radius-server command.
• A number of Network OS CLI commands are not supported by TACACS+ accounting; refer to
Unsupported Network OS command line interface commands on page 725 for a listing of
unsupported operational and configuration commands.
Unsupported Network OS command line interface commands
The following table lists the Network OS CLI commands that are not supported in privileged EXEC
mode.
Unsupported Network OS CLI commands in privileged EXEC mode TABLE 108
Command name Command Description
cipherset Configures FIPS-compliant secure ciphers for LDAP and SSH.
clear Clears the specified parameter.
clear arp Clears Address Resolution Protocol (ARP) configuration data.
clear counters Clears statistics from the switch.
clear dot1x Clears IEEE 802.1X Port-Based Access Control configuration data.
clear fcoe Clears FCoE configuration data.
clear ip Clears Internet Protocol (IP) configuration data.
clear lacp Clears Link Aggregation Control Protocol (LACP) configuration data.
clear lldp Clears Link Layer Discovery Protocol (LLDP) configuration data.
clear mac-address-table Clears the MAC address table.
Network OS Administrator’s Guide 725
53-1003225-04