D-Link DXS-3600-16S Manual page 65

method
Default
Command Mode
Command Default Level
Usage Guideline
Authenticated by method
group radius
group radius
local
local
none
Example
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#aaa authorization network default group radius
DXS-3600-32S(config)#
6-15 aaa accounting network
This command is used to account users in order to count the network access fees. The no form of this command is
used to disable the accounting function.
aaa accounting network default start-stop method1 [method2...]
no aaa accounting network default
Parameters
network
start-stop
DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide
Syntax "{local | none | group radius | group_name}".
Up to four methods supported:
local - Specifies to use the local user name database for authorization.
none - Specifies not tp perform authorization.
group - Specifies to be followed by radius or a group name.
"group radius" means to use all RADIUS servers group.
"group group_name" means to use a specific RADIUS group, created by means
of the aaa group server radius global configuration command.
By default, this feature is disabled.
Global Configuration Mode.
Level: 15
It supports authorization of all the service requests related to the network, such as
802.1X. If authorization is configured, all the authenticated users or interfaces will be
authorized automatically. Three different authorization methods can be specified. If
the access user authenticated method is specified in authorization method list, the
authorization attributes will be applied, otherwise these attributes will be ignored.
Authorization configure method Accept authorization attributes
group radius
local / none
group radius / none
local
group radius / local / none
The RADIUS server authorizes authenticated users by returning a series of
attributes. Therefore, RADIUS authorization is based on RADIUS authentication.
RADIUS authorization is performed only when the user passes the RADIUS
authentication.
This example shows how to use the RADIUS server to authorize network services.
Specifies to perform accounting of the network related service requests, including
dot1x, etc.
Send accounting messages at both the start time and the end time of access. Users
are allowed to access the network, no matter whether the start accounting message
enables the accounting successfully.
Yes
No
No
No
No
57