F3215-HP Load Balancing Module Security Configuration Guide-6PW101
77
Configuration guidelines
When configuring accounting methods, follow these guidelines:
• You can configure a default accounting method for an ISP domain. This method will be used for all
users who support the accounting method and have no specific accounting method configured.
• You can configure local accounting (local) or no accounting (none) as the backup for remote
accounting that is used when the remote accounting server is unavailable.
• Local accounting (local) and no accounting (none) cannot have a backup method.
• Accounting is not supported for FTP services.
• If you enable the accounting optional feature, the limit on the number of local user connections
does not take effective.
Configuration procedure
To configure accounting methods for an ISP domain:
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Enter ISP domain view.
domain isp-name N/A
3. Enable the accounting
optional feature.
accounting optional
Optional.
Disabled by default.
With the accounting optional
feature, a device allows users
to use network resources when
no accounting server is
available or communication
with all accounting servers
fails.
4. Specify the default accounting
method for all types of users.
accounting default { hwtacacs-scheme
hwtacacs-scheme-name [ local ] | local
| none | radius-scheme
radius-scheme-name [ local ] }
Optional.
The default accounting method
is local for all types of users.
5. Specify the command
accounting method.
accounting command
hwtacacs-scheme
hwtacacs-scheme-name
Optional.
The default accounting method
is used by default.
6. Specify the accounting
method for login users.
accounting login { hwtacacs-scheme
hwtacacs-scheme-name [ local ] | local
| none | radius-scheme
radius-scheme-name [ local ] }
Optional.
The default accounting method
is used by default.
Displaying and maintaining AAA
Task Command
Remarks
Display the configuration of
ISP domains.
display domain [ isp-name ] [ | { begin | exclude | include }
regular-expression ]
Available in
any view.