F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Configuration Guide-6PW100

231
Ste
p
Command Remarks
3. Enable the accounting
optional feature.
accounting optional
Optional.
Disabled by default.
With the accounting optional feature,
a device allows users to use network
resources when no accounting server
is available or communication with
all accounting servers fails.
4. Specify the default accounting
method for all types of users.
accounting default
{ hwtacacs-scheme
hwtacacs-scheme-name [ local ]
| local | none | radius-scheme
radius-scheme-name [ local ] }
Optional.
The default accounting method is
local for all types of users.
5. Specify the command
accounting method.
accounting command
hwtacacs-scheme
hwtacacs-scheme-name
Optional.
The default accounting method is
used by default.
6. Specify the accounting
method for DVPN users.
accounting dvpn { local | none |
radius-scheme
radius-scheme-name [ local ] }
Optional.
The default accounting method is
used by default.
7. Specify the accounting
method for login users.
accounting login
{ hwtacacs-scheme
hwtacacs-scheme-name [ local ]
| local | none | radius-scheme
radius-scheme-name [ local ] }
Optional.
The default accounting method is
used by default.
8. Specify the accounting
method for portal users.
accounting portal { local | none
| radius-scheme
radius-scheme-name [ local ] }
Optional.
The default accounting method is
used by default.
9. Specify the accounting
method for PPP users.
accounting ppp
{ hwtacacs-scheme
hwtacacs-scheme-name [ local ]
| local | none | radius-scheme
radius-scheme-name [ local ] }
Optional.
The default accounting method is
used by default.
10. Specify the accounting
method for SSL VPN users.
accounting ssl-vpn
radius-scheme
radius-scheme-name
Optional.
The default accounting method is
used by default.
The following matrixes show the authentication methods and hardware compatibility by user type:
Hardware DVPN user authentication method com
p
atible
F1000-A-EI/F1000-S-EI No
F1000-E Yes
F5000 Yes
Firewall module Yes
U200-A No
U200-S No