FTOS Configuration Guide for the C-Series - Force10 Networks

Chapter 7 Security
Security features are supported on platforms c e s
This chapter discusses several ways to provide access security to the Force10 system. Platform specific
features are identified by the c, e or s icons (as shown below).
• AAA Accounting on page 133
• AAA Authentication on page 136
• AAA Authorization on page 139
• RADIUS on page 145
• TACACS+ on page 150
• VTY Line and Access-Class Configuration on page 155
• SCP and SSH on page 158
• Enabling and Disabling the Telnet Daemon on page 167
• Secure Shell on page 163
• Trace List on page 167 — e
• Protecting Against TCP Tiny and Overlapping Fragment Attack on page 173
For details on all commands discussed in this chapter, see the Security Commands chapter in the FTOS
Command Reference.
AAA Accounting
AAA Accounting is part of the AAA security model (Accounting, Authentication, and Authorization),
which includes services for authentication, authorization, and accounting. For details on commands related
to AAA security, refer to the Security chapter in the FTOS Command Reference.
AAA Accounting enables tracking of services that users are accessing and the amount of network
resources being consumed by those services. When AAA Accounting is enabled, the network server
reports user activity to the security server in the form of accounting records. Each accounting record is
comprised of accounting AV pairs and is stored on the access control server.
As with authentication and authorization, you must configure AAA Accounting by defining a named list of
accounting methods, and then apply that list to various interfaces.
Configuration Task List for AAA Accounting
The following sections present the AAA Accounting configuration tasks:
• Enabling AAA Accounting on page 134 (mandatory)
FTOS Configuration Guide, version 7.7.1.0 133