Configuring Radius Accounting - Dell PowerConnect B-RX Configuration Manual

Configuring RADIUS accounting

The device supports RADIUS accounting for recording information about user activity and system
events. When you configure RADIUS accounting on device, information is sent to a RADIUS
accounting server when specified events occur, such as when a user logs into the device or the
system is rebooted.
Configuring RADIUS accounting for Telnet/SSH (Shell) access
To send an Accounting Start packet to the RADIUS accounting server when an authenticated user
establishes a Telnet or SSH session on the BigIron RX, and an Accounting Stop packet when the
user logs out.
BigIron RX(config)# aaa accounting exec default start-stop radius
Syntax: aaa accounting exec default start-stop radius | tacacs+ | none
Configuring RADIUS accounting for CLI commands
You can configure RADIUS accounting for CLI commands by specifying a privilege level whose
commands require accounting. For example, to configure the BigIron RX to perform RADIUS
accounting for the commands available at the Super User privilege level (that is; all commands on
the device), enter the following command.
BigIron RX(config)# aaa accounting commands 0 default start-stop radius
An Accounting Start packet is sent to the RADIUS accounting server when a user enters a
command, and an Accounting Stop packet is sent when the service provided by the command is
completed.
NOTE
If authorization is enabled, and the command requires authorization, then authorization is
performed before accounting takes place. If authorization fails for the command, no accounting
takes place.
Syntax: aaa accounting commands <privilege-level> default start-stop radius | tacacs | none
The <privilege-level> parameter can be one of the following:
•
•
•
Configuring RADIUS accounting for system events
You can configure RADIUS accounting to record when system events occur on the BigIron RX.
System events include rebooting and when changes to the active configuration are made.
The following command causes an Accounting Start packet to be sent to the RADIUS accounting
server when a system event occurs, and a Accounting Stop packet to be sent when the system
event is completed.
BigIron RX(config)# aaa accounting system default start-stop radius
Syntax: aaa accounting system default start-stop radius | tacacs+ | none
BigIron RX Series Configuration Guide
53-1002253-01
0 – Records commands available at the Super User level (all commands)
4 – Records commands available at the Port Configuration level (port-config and read-only
commands)
5 – Records commands available at the Read Only level (read-only commands)
Configuring RADIUS security
4
109