FTOS Configuration Guide for the C-Series - Force10 Networks

• Suppressing AAA Accounting for null username sessions on page 134 (optional)
• Configuring Accounting of EXEC and privilege-level command usage on page 135 (optional)
• Configuring AAA Accounting for terminal lines on page 135 (optional)
• Monitoring AAA Accounting on page 135 (optional)
Enabling AAA Accounting
The aaa accounting command enables you to create a record for any or all of the accounting functions
monitored. To enable AAA accounting, perform the following task in CONFIGURATION mode:
Command Syntax Command Mode Purpose
aaa accounting {system | exec |
command level} {default | name}
{start-stop | wait-start | stop-only}
{tacacs+}
Suppressing AAA Accounting for null username sessions
When AAA Accounting is activated, the FTOS software issues accounting records for all users on the
system, including users whose username string, because of protocol translation, is NULL. An example of
this is a user who comes in on a line where the AAA Authentication login method-list none command is
applied. To prevent accounting records from being generated for sessions that do not have usernames
associated with them, perform the following task in CONFIGURATION mode:
Command Syntax Command Mode Purpose
aaa accounting suppress
null-username
CONFIGURATION Enable AAA Accounting and create a record for
monitoring the accounting function.
The variables are:
• system—sends accounting information of
any other AAA configuration
• exec—sends accounting information when a
user has logged in to the EXEC mode
• command level—sends accounting of
commands executed at the specified
privilege level
• default | name—Enter the name of a list of
accounting methods.
• start-stop—Use for more accounting
information, to send a start-accounting notice
at the beginning of the requested event and a
stop-accounting notice at the end.
• wait-start—ensures that the TACACS+
security server acknowledges the start notice
before granting the user's process request
• stop-only—Use for minimal accounting;
instructs the TACACS+ server to send a stop
record accounting notice at the end of the
requested user process.
• tacacs+ —Designate the security service.
Currently, FTOS supports only TACACS+
CONFIGURATION Prevent accounting records from being
generated for users whose username string is
NULL
134 Security