Configuring An Accounting Scheme - Huawei Quidway S9300 Configuration Manual

1 AAA and User Management Configuration
l
----End

1.3.4 Configuring an Accounting Scheme

Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
aaa
The AAA view is displayed.
Step 3 Run:
accounting-scheme accounting-scheme-name
An accounting scheme is created and the accounting scheme view is displayed.
By default, the S9300 provides an accounting scheme named default. This scheme can be
modified but cannot be deleted.
Step 4 Run:
accounting-mode { hwtacacs | radius | none }
The accounting mode is set.
By default, the accounting mode is none.
If the accounting mode is set to RADIUS or HWTACACS, you must configure the RADIUS or
HWTACACS server template and apply the template to the corresponding user domain.
Step 5 (Optional) Run:
accounting realtime interval
Interim accounting is enabled and the accounting interval is set.
By default, interim accounting is enabled and the accounting interval is 5 minutes.
The accounting interval depends on network situations. A short interval increases the traffic on
the network and burdens the device that receive interim accounting packets. A long interval
increases the errors of accounting when the communication between accounting server and the
S9300 fails.
Step 6 (Optional) Run:
accounting start-fail { online | offline }
The policy for remote accounting-start failure is set.
If accounting start fails when a user logs in, the S9300 processes the user according to the policy
for accounting start failure.
By default, the S9300 forbids a user to get online when accounting start fails.
1-8
When the HWTACACS server fails, the command-line-based authorization mode changes
to the local authorization mode. Authorization fails because the level of the input command
is higher than the level set on the local end.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Issue 06 (2010–01–08)