Configuring Aaa Accounting Default Methods - Cisco N5010P-N2K-BE Software Configuration Manual

Configuring AAA
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m

Configuring AAA Accounting Default Methods

The Nexus 5000 Series switch supports TACACS+ and RADIUS methods for accounting. The switches
report user activity to TACACS+ or RADIUS security servers in the form of accounting records. Each
accounting record contains accounting attribute-value (AV) pairs and is stored on the AAA server.
When you activate AAA accounting, the Nexus 5000 Series switch reports these attributes as accounting
records, which are then stored in an accounting log on the security server.
You can create default method lists defining specific accounting methods, which include the following:.
•
•
•
Note If you have configured server groups and the server groups do not respond, by default the local database
is used for authentication.
Before you configure AAA accounting default methods, configure RADIUS or TACACS+ server groups
as needed.
To configure AAA accounting default methods, perform this task:
Command
Step 1
switch# configure terminal
Step 2
switch(config)# aaa accounting default
{group group-list | local}
Step 3
switch(config)# exit
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
16-10
RADIUS server group—Uses the global pool of RADIUS servers for accounting.
Specified server group—Uses a specified RADIUS or TACACS+ server group for accounting.
Local—Uses the local username or password database for accounting.
Purpose
Enters configuration mode.
Configures default accounting method. One or more
server group names can be specified in a space
separated list.
The group-list argument consists of a
space-delimited list of group names. The group
names are of the following:
radius—Uses the global pool of RADIUS
•
servers for accounting.
• named-group—Uses a named subset of
TACACS+ or RADIUS servers for accounting.
The local method uses the local database for
accounting.
The default method is local, which is used when no
server groups are configured or when all the
configured server group do not respond.
Exits configuration mode.
Chapter 16 Configuring AAA
OL-16597-01