R3166-R3206-HP High-End Firewalls Access Control Configuration Guide-6PW101

164
To do… Use the command… Remarks
Enable the accounting optional
feature
accounting optional
Optional
Disabled by default
With the accounting optional
feature, a device allows users
to use network resources when
no accounting server is
available or communication
with all accounting servers
fails.
Specify the default accounting
method for all types of users
accounting default { hwtacacs-scheme
hwtacacs-scheme-name [ local ] | local
| none | radius-scheme
radius-scheme-name [ local ] }
Optional
local by default
Specify the command accounting
method
accounting command
hwtacacs-scheme
hwtacacs-scheme-name
Optional
The default accounting method
is used by default.
Specify the accounting method for
login users
accounting login { hwtacacs-scheme
hwtacacs-scheme-name [ local ] | local
| none | radius-scheme
radius-scheme-name [ local ] }
Optional
The default accounting method
is used by default.
Specify the accounting method for
portal users
accounting portal { local | none |
radius-scheme radius-scheme-name
[ local ] }
Optional
The default accounting method
is used by default.
Specify the accounting method for
PPP users
accounting ppp { hwtacacs-scheme
hwtacacs-scheme-name [ local ] | local
| none | radius-scheme
radius-scheme-name [ local ] }
Optional
The default accounting method
is used by default.
NOTE:
• If you configure the accounting optional command, the limit on the number of local user connections is
not effective.
• The accounting method specified with the accounting default command is for all types of users and has
a priority lower than that for a specific access type.
• If you specify the radius-scheme
radius-scheme-name local or hwtacacs-scheme
hwtacacs-scheme-name local keyword and argument combination when configuring an accounting
method, local accounting is the backup method and is used only when the remote server is not
available.
• If you specify only the local or none keyword in an accounting method configuration command, the
device has no backup accounting method and performs only local accounting or does not perform an
y
accounting.
• Accounting is not supported for FTP services.
Tearing down user connections
Follow these steps to tear down user connections: