Dell PowerConnect B-FCXs Configuration Manual page 1210

32
Configuring TACACS/TACACS+ security
TACACS+ accounting
TACACS+ accounting works as follows.
1. One of the following events occur on the Dell PowerConnect device:
2. The Dell PowerConnect device checks the configuration to see if the event is one for which
3. If the event requires TACACS+ accounting, the Dell PowerConnect device sends a TACACS+
4. The TACACS+ accounting server acknowledges the Accounting Start packet.
5. The TACACS+ accounting server records information about the event.
6. When the event is concluded, the Dell PowerConnect device sends an Accounting Stop packet
7.
AAA operations for TACACS/TACACS+
The following table lists the sequence of authentication, authorization, and accounting operations
that take place when a user gains access to a Dell PowerConnect device that has TACACS/TACACS+
security configured.
User action
User attempts to gain access to the
Privileged EXEC and CONFIG levels
of the CLI
User logs in using Telnet/SSH
User logs into the Web Management
Interface
1168
•
A user logs into the management interface using Telnet or SSH
•
A user enters a command for which accounting has been configured
•
A system event occurs, such as a reboot or reloading of the configuration file
TACACS+ accounting is required.
Accounting Start packet to the TACACS+ accounting server, containing information about the
event.
to the TACACS+ accounting server.
The TACACS+ accounting server acknowledges the Accounting Stop packet.
Applicable AAA operations
Enable authentication:
aaa authentication enable default <method-list>
Exec authorization (TACACS+):
aaa authorization exec default tacacs+
System accounting start (TACACS+):
aaa accounting system default start-stop <method-list>
Login authentication:
aaa authentication login default <method-list>
Exec authorization (TACACS+):
aaa authorization exec default tacacs+
Exec accounting start (TACACS+):
aaa accounting exec default <method-list>
System accounting start (TACACS+):
aaa accounting system default start-stop <method-list>
Web authentication:
aaa authentication web-server default <method-list>
Exec authorization (TACACS+):
aaa authorization exec default tacacs+
PowerConnect B-Series FCX Configuration Guide
53-1002266-01