Local Access; Accounting - Lenovo ThinkSystem NE2552E Application Manual

Local Access

Accounting

106
NE2552E Application Guide for ENOS 8.4
The administrator has an option to allow local access via Telnet using the
command:
NE2552E(config)# tacacs-server backdoor
The default value for Telnet access is disabled. The administrator also can enable
secure local access to allow access if both the primary and the secondary TACACS+
servers fail to respond. The command for this is:
NE2552E(config)# tacacs-server secure-backdoor
Note: To obtain the TACACS+ local access password for your switch, contact your
Service and Support line.
Accounting is the action of recording a userʹs activities on the device for the
purposes of billing and/or security. It follows the authentication and authorization
actions. If the authentication and authorization is not performed via TACACS+,
there are no TACACS+ accounting messages sent out.
You can use TACACS+ to record and track software login access, configuration
changes, and interactive commands.
The NE2552E supports the following TACACS+ accounting attributes:
protocol (console/telnet/ssh/http)

 start_time
 stop_time
 elapsed_time
 disc‐cause
Note: When using the Browser‐Based Interface, the TACACS+ Accounting Stop
records are sent only if the Quit button on the browser is clicked.