Cisco Nexus 3600 NX-OS Security Configuration Manual page 33

Configuring AAA
When you activate AAA accounting, the Cisco Nexus device reports these attributes as accounting records,
which are then stored in an accounting log on the security server.
You can create default method lists defining specific accounting methods, which include the following:.
• RADIUS server group—Uses the global pool of RADIUS servers for accounting.
• Specified server group—Uses a specified RADIUS or TACACS+ server group for accounting.
• Local—Uses the local username or password database for accounting.
If you have configured server groups and the server groups do not respond, by default, the local database
Note
is used for authentication.
Before You Begin
Before you configure AAA accounting default methods, configure RADIUS or TACACS+ server groups as
needed.
Procedure
Step 1
Step 2
Step 3
Step 4
Step 5
Command or Action
switch# configure terminal
switch(config)# aaa accounting
default {group group-list |
local}
switch(config)# exit
switch# show aaa accounting
switch# copy running-config
startup-config
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
Configuring AAA Accounting Default Methods
Purpose
Enters global configuration mode.
Configures the default accounting method. One or more server
group names can be specified in a space-separated list.
The group-list argument consists of a space-delimited list of
group names. The group names are the following:
• radius —Uses the global pool of RADIUS servers for
accounting.
• named-group —Uses a named subset of TACACS+ or
RADIUS servers for accounting.
The local method uses the local database for accounting.
The default method is local, which is used when no server
groups are configured or when all the configured server group
do not respond.
Exits configuration mode.
(Optional)
Displays the configuration AAA accounting default methods.
(Optional)
Copies the running configuration to the startup configuration.
19