Optional) Configuring A Recording Scheme - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
The accounting mode is set.
By default, the accounting mode is none.
If the accounting mode is set to RADIUS or HWTACACS, you must configure the RADIUS or
HWTACACS server template and apply the template to the corresponding user domain.
Step 5 (Optional) Run:
accounting realtime interval
Interim accounting is enabled and the accounting interval is set.
By default, interim accounting is disabled.
The accounting interval depends on network situations. A short interval increases the traffic on
the network and burdens the device that receive interim accounting packets. A long interval
increases the errors of accounting when the communication between accounting server and the
S3700 fails.
Step 6 (Optional) Run:
accounting start-fail { online | offline }
The policy for remote accounting-start failure is set.
If accounting start fails when a user logs in, the S3700 processes the user according to the policy
for accounting start failure.
By default, the S3700 forbids a user to get online when accounting start fails.
Step 7 (Optional) Run:
accounting interim-fail [ max-times times ] { online | offline }
The policy for remote interim accounting-start failure is set.
If the accounting fails after a user goes online, the S3700 processes the user according to the
policy for interim accounting failure.
By default, the policy for remote interim accounting-start failure is disabled.
----End

1.3.5 (Optional) Configuring a Recording Scheme

Context
To monitor the device and locate faults, you can configure a recording scheme to record the
following:
l
l
l
Issue 01 (2011-07-15)
Commands that are run on the S3700
Information about connections
System events
NOTE
You can configure the recording function only when HWTACACS is adopted.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 AAA and User Management Configuration
8