HP MSR2000/3000/4000 Router Series Security Command Reference

4
Predefined user roles
network-admin
Parameters
hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by its name, a
case-insensitive string of 1 to 32 characters.
local: Performs local accounting.
none: Does not perform accounting.
radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, a case-insensitive string of
1 to 32 characters.
Usage guidelines
The default accounting method is used for all users who support this method and do not have a specific
accounting method configured.
Local accounting is only used for monitoring and controlling the number of local user connections, but
does not provide the statistics function that the accounting feature generally provides.
You can specify multiple default accounting methods, one primary and multiple backup methods. When
the primary method is invalid, the device attempts to use the backup methods in sequence. For example,
the accounting default radius-scheme radius-scheme-name local none command specifies the primary
default RADIUS accounting method and two backup accounting methods, local accounting and no
accounting. With this command, the device performs RADIUS accounting by default, performs local
accounting when the RADIUS server is invalid, and does not perform accounting when both of the
previous methods are invalid.
Examples
# Configure the default accounting method for ISP domain test to use RADIUS scheme rd and use local
accounting as the backup.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] accounting default radius-scheme rd local
Related commands
• hwtacacs scheme
• local-user
• radius scheme
accounting lan-access
Use accounting lan-access to configure the accounting method for LAN users.
Use undo accounting lan-access to restore the default.
Syntax
In non-FIPS mode:
accounting lan-access { local [ none ] | none | radius-scheme radius-scheme-name [ local ] [ none ] }
undo accounting lan-access
In FIPS mode: