Connectivity Guide

• none — No accounting notices are sent.
• logging — Logs all accounting notices in syslog.
• group tacacs+ — Logs all accounting notices on the rst reachable TACACS+ server.
Default AAA accounting is disabled.
Command Mode CONFIGURATION
Usage Information You can enable the recording of accounting events in both the syslog and on TACACS+ servers. The no version of
the command disables AAA accounting.
Example
OS10(config)# aaa accounting commands all console start-stop logging group
tacacs+
Supported Releases 10.4.1.0 or later
aaa authentication login
Congures the AAA authentication method used for console, and SSH and Telnet logins.
Syntax
aaa authentication login {console | default} {local | group radius | group
tacacs+}
Parameters
• console — Congure authentication methods for console logins.
• default — Congure authentication methods for SSH and Telnet logins.
• local — Use the local username, password, and role entries congured with the username password
role command.
• group radius — Use the RADIUS servers congured with the radius-server host command.
• group tacacs+ — Use the TACACS+ servers congured with the tacacs-server host command.
Default Local authentication
Command Mode CONFIGURATION
Usage Information The no version of this command removes all congured authentication methods and defaults to using local
authentication.
Example
OS10(config)# aaa authentication login default group radius local
OS10(config)# do show running-configuration aaa
aaa authentication login default group radius local
aaa authentication login console local
OS10(config)# no aaa authentication login default
OS10(config)# do show running-configuration aaa
aaa authentication login default local
aaa authentication login console local
Supported Releases 10.4.1.0 or later
aaa re-authenticate enable
Requires user re-authentication after a change in the authentication method or server.
Syntax
aaa re-authenticate enable
Security 801