Specifying Switch User Roles And Smnpv3 Parameters On Aaa Servers; Displaying And Clearing The Local Aaa Accounting Log; Verifying Aaa Configuration - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Specifying Switch User Roles and SMNPv3 Parameters on AAA Servers

• accountinginfo—Stores additional accounting information in addition to the attributes covered by a
Specifying Switch User Roles and SMNPv3 Parameters on AAA Servers
You can use the VSA cisco-av-pair on AAA servers to specify user role mapping for the Cisco Nexus 5000
Series switch using this format:
shell:roles="roleA roleB ..."
If you do not specify the role option in the cisco-av-pair attribute, the default user role is network-operator.
You can also specify your SNMPv3 authentication and privacy protocol attributes as follows:
shell:roles="roleA roleB..." snmpv3:auth=SHA priv=AES-128
The SNMPv3 authentication protocol options are SHA and MD5. The privacy protocol options are AES-128
and DES. If you do not specify these options in the cisco-av-pair attribute, MD5 and DES are the default
authentication protocols.
Related Topics
•

Displaying and Clearing the Local AAA Accounting Log

The Cisco Nexus 5000 Series switch maintains a local log for the AAA accounting activity. To display this
log and clear it, perform this task:
Procedure
Step 1
Step 2

Verifying AAA Configuration

To display AAA configuration information, perform one of the following tasks:
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
238
standard RADIUS accounting protocol. This attribute is sent only in the VSA portion of the
Account-Request frames from the RADIUS client on the switch, and it can only be used with the
accounting protocol-related PDUs.
Configuring User Accounts and RBAC, page 315
Command or Action
switch# show accounting log [size]
[start-time year month day hh : mm
: ss]
switch# clear accounting log
Displaying and Clearing the Local AAA Accounting Log
Purpose
Displays the accounting log contents. By default, the
command output contains up to 250,000 bytes of the
accounting log. You can use the size argument to limit
command output. The range is from 0 to 250000 bytes. You
can also specify a start time for the log output.
(Optional)
Clears the accounting log contents.
OL-16597-01