Establishing A Session With A Router If The Aaa Server Is Unreachable - Cisco Catalyst 2960-XR Security Configuration Manual

Configuring TACACS+
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Switch# configure terminal
Step 2
aaa accounting network start-stop tacacs+
Example:
Switch(config)# aaa accounting network start-stop
tacacs+
Step 3
aaa accounting exec start-stop tacacs+
Example:
Switch(config)# aaa accounting exec start-stop
tacacs+
Step 4 end
Example:
Switch(config)# end
What to Do Next
To establish a session with a router if the AAA server is unreachable, use the aaa accounting system
guarantee-first command. It guarantees system accounting as the first record, which is the default condition.
In some situations, users might be prevented from starting a session on the console or terminal connection
until after the system reloads, which can take more than 3 minutes.
To establish a console or Telnet session with the router if the AAA server is unreachable when the router
reloads, use the no aaa accounting system guarantee-first command.
Related Topics
TACACS+ Accounting, on page 43

Establishing a Session with a Router if the AAA Server is Unreachable

To establishing a session with a router if the AAA server is unreachable, use the aaa accounting system
guarantee-first command. It guarantees system accounting as the first record, which is the default condition.
In some situations, users might be prevented from starting a session on the console or terminal connection
until after the system reloads, which can take more than 3 minutes.
OL-29434-01
Establishing a Session with a Router if the AAA Server is Unreachable
Purpose
Enters the global configuration mode.
Enables TACACS+ accounting for all network-related
service requests.
Enables TACACS+ accounting to send a start-record
accounting notice at the beginning of a privileged EXEC
process and a stop-record at the end.
Returns to privileged EXEC mode.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
49