Connectivity Guide

aaa accounting
Enables AAA accounting.
Syntax
aaa accounting commands all {console | default} {start-stop | stop-only | none}
[logging] [group tacacs+]
Parameters
• commands all — Record all user-entered commands. This option is not supported for RADIUS accounting.
• console — Record all user authentication and logins or all user-entered commands in OS10 sessions on
console connections.
• default — Record all user authentication and logins or all user-entered commands in OS10 sessions on
remote connections; for example, Telnet and SSH.
•
start-stop — Send a start notice when a process begins, and a stop notice when the process ends.
• stop-only — Send only a stop notice when a process ends.
• none — No accounting notices are sent.
• logging — Logs all accounting notices in syslog.
• group tacacs+ — Logs all accounting notices on the rst reachable TACACS+ server.
Default AAA accounting is disabled.
Command Mode CONFIGURATION
Usage Information You can enable the recording of accounting events in both the syslog and on TACACS+ servers. The no version of
the command disables AAA accounting.
Example
OS10(config)# aaa accounting commands all console start-stop logging group
tacacs+
Supported Releases 10.4.1.0 or later
aaa authentication login
Congures the AAA authentication method used for console, and SSH and Telnet logins.
Syntax
aaa authentication login {console | default} {local | group radius | group
tacacs+}
Parameters
• console — Congure authentication methods for console logins.
• default — Congure authentication methods for SSH and Telnet logins.
• local — Use the local username, password, and role entries congured with the username password
role command.
• group radius — Use the RADIUS servers congured with the radius-server host command.
• group tacacs+ — Use the TACACS+ servers congured with the tacacs-server host command.
Default Local authentication
Command Mode CONFIGURATION
Usage Information The no version of this command removes all congured authentication methods and defaults to using local
authentication.
Example
OS10(config)# aaa authentication login default group radius local
OS10(config)# do show running-configuration aaa
622 System management