Configuring Command Accounting; Configuration Procedure; Configuration Example - HP 12500 Configuration Manual

[Device-luser-manage-monitor] service-type telnet
[Device-luser-manage-monitor] authorization-attribute level 1

Configuring command accounting

Command accounting allows the HWTACACS server to record all executed commands that are
supported by the device, regardless of the command execution result. This function helps control and
monitor user behaviors on the device.
When command accounting is disabled, the accounting server does not record the commands executed
by users. If command accounting is enabled but command authorization is not, every executed
command is recorded on the HWTACACS server. If both command accounting and command
authorization are enabled, only authorized commands that are executed are recorded on the
HWTACACS server.
This section provides only the procedure for configuring command accounting. To make the command
accounting function take effect, you must configure a command accounting method in ISP domain view.
For more information, see Security Configuration Guide.

Configuration procedure

To configure command accounting:
Step
1. Enter system view.
2. Enter
view.
3. Enable
authentication.
4. Enable
accounting.

Configuration example

Network requirements
To monitor and control user operations on the device in
commands executed by users to the HWTACACS server.
Command
system-view
user-interface { first-number1
user interface
[ last-number1 ] | { aux | console
| vty } first-number2
[ last-number2 ] }
scheme
authentication-mode scheme
command
command accounting
Remarks
N/A
N/A
By default, the authentication mode is none
for the console user interface and
password for the AUX user interface.
By default, command accounting is
disabled, and the accounting server does
not record the commands executed by
users.
Figure
62
28, configure the device to send