Configuring Accounting For Asa - Alcatel-Lucent OmniSwitch 6850-48 Management Manual

Configuring Accounting for ASA

Configuring Accounting for ASA
Accounting servers track network resources such as time, packets, bytes, etc., and user activity (when a
user logs in and out, how many login attempts were made, session length, etc.). The accounting servers
may be located anywhere in the network.
Note the following:
•
Up to 4 servers may be configured.
•
The servers may be different types.
•
ACE cannot be used as an accounting server.
•
The keyword local must be specified if you want accounting to be performed via the Switch Logging
feature in the switch. If local is specified, it must be the last server in the list.
Note that external accounting servers are configured through the
aaa tacacs+-server
the OmniSwitch AOS Release 6 Network Configuration Guide.
To enable accounting (logging a user session) for Authenticated Switch Access, use the
aaa accounting session
LDAP servers have already been configured through the aaa radius-server and aaa ldap-server
commands.
-> aaa accounting session rad1 ldap2 local
After this command is entered, accounting will be performed through the rad1 RADIUS server. If that
server is unavailable, the LDAP server, ldap2, will be used for accounting. If that server is unavailable,
logging will be done locally on the switch through the Switch Logging feature. (For more information
about Switch Logging, see the OmniSwitch AOS Release 6 Network Configuration Guide.)
To remove an individual server from the list of servers, enter the aaa accounting session command with
the relevant server name(s), removing the desired server from the list. For example:
-> aaa accounting session rad1 local
The server ldap2 is removed as an accounting server.
To disable accounting for Authenticated Switch Access, use the no form of the aaa accounting session
command:
-> no aaa accounting session
Accounting will not be performed for Authenticated Switch Access sessions.
page 9-12
commands. These commands are described in "Managing Authentication Servers" in
command with the relevant server name(s). In this example, the RADIUS and
OmniSwitch AOS Release 6 Switch Management Guide
Managing Switch Security
aaa radius-server and
September 2009