HP 6125G Configuration Manual page 42

Step
5. Enable command authorization.
6. Enable command accounting.
7. Exit to system view.
8. Apply an AAA authentication
scheme to the intended domain.
Command
command authorization
command accounting
quit
a. Enter ISP domain view:
domain domain-name
b. Apply an AAA scheme
to the domain:
authentication default
{ hwtacacs-scheme
hwtacacs-scheme-name
[ local ] | local | none |
radius-scheme
radius-scheme-name
[ local ] }
c. Exit to system view:
quit
36
Remarks
Optional.
By default, command authorization
is disabled. The commands
available for a user only depend on
the user privilege level.
If command authorization is
enabled, a command is available
only if the user has the
commensurate user privilege level
and is authorized to use the
command by the AAA scheme.
Optional.
By default, command accounting is
disabled. The accounting server
does not record the commands
executed by users.
Command accounting allows the
HWTACACS server to record all
executed commands that are
supported by the device,
regardless of the command
execution result. This function helps
control and monitor user behaviors
on the device. If command
accounting is enabled and
command authorization is not
enabled, every executed command
is recorded on the HWTACACS
server. If both command
accounting and command
authorization are enabled, only the
authorized and executed
commands are recorded on the
HWTACACS server.
N/A
Optional.
By default, local authentication is
used.
For local authentication, configure
local user accounts.
For RADIUS or HWTACACS
authentication, configure the
RADIUS or HWTACACS scheme
on the device and configure
authentication settings (including
the username and password) on the
server.
For more information about AAA
configuration, see Security
Configuration Guide.