HPE FlexNetwork 10500 Series Security Configuration Manual page 73

•
Local accounting counts and controls the number of concurrent users who use the same local
user account. The threshold is configured by using the access-limit command.
Configuration procedure
To configure accounting methods for an ISP domain:
Step
1. Enter system view.
2. Enter ISP domain view.
3. Specify default accounting
methods for all types of
users.
4. Specify the command
accounting method.
5. Specify accounting
methods for LAN users.
6. Specify accounting
methods for login users.
7. Specify accounting
methods for portal users.
8. Configure access control
for users who encounter
accounting-start failures.
9. Configure access control
for users who have failed all
their accounting-update
attempts.
10. Configure access control
for users who have used up
their data quotas.
11. Specify the accounting
method for dual-stack
users.
Command
system-view
domain isp-name
accounting default { hwtacacs-scheme
hwtacacs-scheme-name
[ radius-scheme radius-scheme-name ]
[ local ] [ none ] | local [ none ] | none |
radius-scheme radius-scheme-name
[ hwtacacs-scheme
hwtacacs-scheme-name ] [ local ]
[ none ] }
accounting command
hwtacacs-scheme
hwtacacs-scheme-name
accounting lan-access { broadcast
radius-scheme radius-scheme-name1
radius-scheme radius-scheme-name2
[ local ] [ none ] | local [ none ] | none |
radius-scheme radius-scheme-name
[ local ] [ none ] }
accounting login { hwtacacs-scheme
hwtacacs-scheme-name
[ radius-scheme radius-scheme-name ]
[ local ] [ none ] | local [ none ] | none |
radius-scheme radius-scheme-name
[ hwtacacs-scheme
hwtacacs-scheme-name ] [ local ]
[ none ] }
accounting portal { broadcast
radius-scheme radius-scheme-name1
radius-scheme radius-scheme-name2
[ local ] [ none ] | local [ none ] | none |
radius-scheme radius-scheme-name
[ local ] [ none ] }
accounting start-fail { offline | online }
accounting update-fail { [ max-times
max-times ] offline | online }
accounting quota-out { offline | online }
accounting dual-stack { merge |
separate }
56
Remarks
N/A
N/A
By default, the accounting
method is local.
The none keyword is not
supported in FIPS mode.
By default, the default
accounting method is used
for command accounting.
By default, the default
accounting method is used
for LAN users.
The none keyword is not
supported in FIPS mode.
By default, the default
accounting method is used
for login users.
The none keyword is not
supported in FIPS mode.
By default, the default
accounting method is used
for portal users.
The none keyword is not
supported in FIPS mode.
By default, the device
allows users who
encounter accounting-start
failures to stay online.
By default, the device
allows users who have
failed all their
accounting-update
attempts to stay online.
By default, the device logs
off users who have used up
their data quotas.
By default, the merge
method is used.