Deployment Guide

Security
The commands in this chapter are available on Dell EMC Networking OS.
For configuration details, see the Security section in the Dell EMC Networking OS Configuration Guide.
NOTE: Dell EMC Networking OS implements LEAP with MSCHAP v2 supplicant.
Topics:
• AAA Accounting Commands
• Authorization and Privilege Commands
• Obscure Password Commands
• Authentication and Password Commands
• RADIUS Commands
• TACACS+ Commands
• Port Authentication (802.1X) Commands
• SSH and SCP Commands
• Secure DHCP Commands
• Role-Based Access Control Commands
• ICMP Vulnerabilities
• System Security Commands
AAA Accounting Commands
AAA Accounting enables tracking of services that users are accessing and the amount of network resources being consumed by
those services. When you enable AAA Accounting, the network server reports user activity to the TACACS+ security server in
the form of accounting records. Each accounting record is comprised of accounting AV pairs and is stored on the access control
server.
As with authentication and authorization, you must configure AAA Accounting by defining a named list of accounting methods,
and then applying that list to various interfaces.
aaa accounting
Enable AAA Accounting and create a record for monitoring the accounting function.
Syntax
aaa accounting {commands {level | role role-name | dot1x | exec | rest |
suppress | system} {name | default} {start-stop | wait-start | stop-only}
{radius | tacacs+}
To disable AAA Accounting, use the no aaa accounting {commands {level | role role-
name | dot1x | exec | rest | suppress | system} {name | default} {start-
stop | wait-start | stop-only} {radius | tacacs+} command.
Parameters
system Enter the keyword system to send accounting information of any other AAA
configuration.
exec Enter the keyword exec to send accounting information when a user has logged in
to EXEC mode.
dot1x Enter the keyword dot1x to send accounting information when a dot1x user has
logged in.
48
1338 Security