Users Guide

282 | Authentication Servers Dell PowerConnect W-Series ArubaOS 6.1 | User Guide
 Acct-Output-Octets
 Acct-Input-Packets
 Acct-Output-Packets
You can use either the WebUI or CLI to assign a server group for RADIUS accounting.
In the WebUI
1. Navigate to the Configuration > Security > Authentication > AAA Profiles page.
2. Select AAA Profile, then select the AAA profile instance.
3. (Optional) In the Profile Details pane, select RADIUS Interim Accounting to allow the controller to send
Interim-Update messages with current user statistics to the server at regular intervals. This option is disabled
by default, allowing the controller to send only start and stop messages RADIUS accounting server.
4. In the profile list, scroll down and select the Radius Accounting Server Group for the AAA profile. Select the
server group from the drop-down menu.
You can add additional servers to the group or configure server rules.
5. Click Apply.
In the CLI
aaa profile <profile>
radius-accounting <group>
radius-interim-accounting
TACACS+ Accounting
TACACS+ accounting allows commands issued on the controller to be reported to TACACS+ servers. You can
specify the types of commands that are reported (action, configuration, or show commands) or have all
commands reported.
You can configure TACACS+ accounting only with the CLI:
aaa tacacs-accounting server-group <group> command {action|all|configuration|show} mode
{enable|disable}
Configuring Authentication Timers
Table 54 describes the timers you can configure that apply to all clients and servers. These timers can be left at
their default values for most implementations.
Table 54 Authentication Timers
Timer Description
User Idle Timeout Maximum period after which a client is considered idle if there is no user traffic from
the client.
The timeout period is reset if there is a user traffic. After this timeout period has
elapsed, the controller sends probe packets to the client; if the client responds to
the probe, it is considered active and the User Idle Timeout is reset (an active client
that is not initiating new sessions is not removed). If the client does not respond to
the probe, it is removed from the system. If the keyword seconds is not specified,
the value defaults to minutes at the command line.
Range: 1 to 255 minutes (30 to 15300 seconds)
Default: 5 minutes (300 seconds)