Configuring Aaa Accounting Default Methods - Cisco Nexus 9000 Series Configuration Manual

Configuring AAA Accounting Default Methods

Command or Action
Step 2 no aaa authentication login ascii-authentication
Example:
switch(config)# no aaa authentication login
ascii-authentication
Step 3
aaa authentication login {mschap | mschapv2} enable
Example:
switch(config)# aaa authentication login mschap
enable
Step 4 exit
Example:
switch(config)# exit
switch#
Step 5 (Optional) show aaa authentication login {mschap |
mschapv2}
Example:
switch# show aaa authentication login mschap
Step 6 (Optional) copy running-config startup-config
Example:
switch# copy running-config startup-config
Configuring AAA Accounting Default Methods
Cisco NX-OS software supports TACACS+ and RADIUS methods for accounting. Cisco NX-OS devices
report user activity to TACACS+ or RADIUS security servers in the form of accounting records. Each
accounting record contains accounting attribute-value (AV) pairs and is stored on the AAA server.
When you activate AAA accounting, the Cisco NX-OS device reports these attributes as accounting records,
which are then stored in an accounting log on the security server.
You can create default method lists defining specific accounting methods, which include the following:
RADIUS server group
Specified server group
Local
Note If you have configured server groups and the server groups do not respond, by default, the local database is
used for authentication.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
26
Uses the global pool of RADIUS servers for accounting.
Uses a specified RADIUS or TACACS+ server group for accounting.
Uses the local username or password database for accounting.
Purpose
Disables ASCII authentication.
Enables MSCHAP or MSCHAP V2 authentication. The
default is disabled.
Note You cannot enable both MSCHAP and
MSCHAP V2 on your Cisco NX-OS device.
Exits configuration mode.
Displays the MSCHAP or MSCHAP V2 configuration.
Copies the running configuration to the startup
configuration.
Configuring AAA