4.3 CLI Profile
If you wish to restrict CLI commands for a user, simply enable the RADIUS cli-profile setting as shown
below. On the RADIUS server, via vendor identifier code 1584 using attributes types 194 and 195, set
attribute type 194 to a value of 0 and add the CLI command using attribute 195.
VSPswitch:1(config)#radius cli-profile
If you wish to change the default CLI access attribute value to another value other than 194, enter the
following command.
VSPswitch:1(config)#radius command-access-attribute <192-240>
If you wish to change the default CLI command attribute value to another value other than 195, enter the
following command.
VSPswitch:1(config)#radius cli-commands-attribute <192-240>
4.4 Enabling RADIUS accounting globally
To use RADIUS accounting, it must also be enabled globally using the following command.
VSPswitch:1(config)#radius accounting enable
4.5 Enabling accounting for CLI commands
You can specify whether you want CLI commands included in RADIUS accounting requests by issuing
the following command.
VSPswitch:1(config)#radius accounting include-cli-commands
You can also specify the number of CLI commands entered prior to the VSP switch sending a CLI
accounting record. The default setting is 40. If you wish to change the default value, enter the following
command.
VSPswitch:1(config)#radius cli-cmd-count <1-40>
March 2015
Avaya Inc. – External Distribution
avaya.com
27