OS6860(E)_AOS_8.1.1.R01_Switch_Management_Guide

Managing Switch Security
Configuring Accounting for ASA
Configuring Accounting for ASA
Accounting servers track network resources such as time, packets, bytes, etc., and user activity (when a
user logs in and out, how many login attempts were made, session length, etc.). The accounting servers
may be located anywhere in the network.
Note the following:
• The servers may be different types.
• The keyword local must be specified if you want accounting to be performed via the Switch Logging
feature in the switch. If local is specified, it must be the last server in the list.
Note that external accounting servers are configured through the aaa radius-server and
aaa tacacs+-server commands. These commands are described in “Managing Authentication Servers” in
the OmniSwitch AOS Release 8 Network Configuration Guide.
To enable accounting (logging a user session) for Authenticated Switch Access, use the
aaa accounting session command with the relevant server name(s). In this example, the RADIUS and
LDAP servers have already been configured through the aaa radius-server and aaa ldap-server
commands.
-> aaa accounting session rad1 ldap2 local
After this command is entered, accounting will be performed through the rad1 RADIUS server. If that
server is unavailable, the LDAP server, ldap2, will be used for accounting. If that server is unavailable,
logging will be done locally on the switch through the Switch Logging feature. (For more information
about Switch Logging, see the OmniSwitch AOS Release 8 Network Configuration Guide.)
To remove an individual server from the list of servers, enter the aaa accounting session command with
the relevant server name(s), removing the desired server from the list. For example:
-> aaa accounting session rad1 local
The server ldap2 is removed as an accounting server.
To disable accounting for Authenticated Switch Access, use the no form of the aaa accounting session
command:
-> no aaa accounting session
Accounting will not be performed for Authenticated Switch Access sessions.
OmniSwitch AOS Release 8 Switch Management Guide May 2014 page 7-11