HP PROCURVE 6208M-SX Installation And Getting Started Manual page 76

3. If the event requires TACACS+ accounting, the HP device sends a TACACS+ Accounting Start packet to the
TACACS+ accounting server, containing information about the event.
4. The TACACS+ accounting server acknowledges the Accounting Start packet.
5. The TACACS+ accounting server records information about the event.
6. When the event is concluded, the HP device sends an Accounting Stop packet to the TACACS+ accounting
server.
7. The TACACS+ accounting server acknowledges the Accounting Stop packet.
AAA Operations for TACACS/TACACS+
The following table lists the sequence of authentication, authorization, and accounting operations that take place
when a user gains access to an HP device that has TACACS/TACACS+ security configured.
User Action
User attempts to gain access to the
Privileged EXEC and CONFIG levels of
the CLI
User logs in using Telnet/SSH
User logs into the Web management
interface
User logs out of Telnet/SSH session
Applicable AAA Operations
Enable authentication:
aaa authentication enable default <method-list>
Exec authorization (TACACS+):
aaa authorization exec default tacacs+
System accounting start (TACACS+):
aaa accounting system default start-stop <method-list>
Login authentication:
aaa authentication login default <method-list>
Exec authorization (TACACS+):
aaa authorization exec default tacacs+
Exec accounting start (TACACS+):
aaa accounting exec default <method-list>
System accounting start (TACACS+):
aaa accounting system default start-stop <method-list>
Web authentication:
aaa authentication web-server default <method-list>
Exec authorization (TACACS+):
aaa authorization exec default tacacs+
Command authorization for logout command (TACACS+):
aaa authorization commands <privilege-level> default <method-list>
Command accounting (TACACS+):
aaa accounting commands <privilege-level> default start-stop
<method-list>
EXEC accounting stop (TACACS+):
aaa accounting exec default start-stop <method-list>
Securing Access
3 - 19