Configuring Accounting With Aaa - HP ProCurve 7000dl Series Basic Management And Configuration Manual

Controlling Management Access to the ProCurve Secure Router
Quick Start
2-74

Configuring Accounting with AAA

Configuring accounting includes two basic steps:
Configure an accounting named list. You can define accounting named
lists to track the following events:
• a user accesses the basic or enable mode context
• a user logs in to the router
• a user establishes an outbound Telnet session
Apply the accounting named list.
Of course, the AAA subsystem must be enabled, and the TACACS+ server must
be defined.
1. To configure a named list that tracks when users access the basic or enable
mode context, enter the following command from the global configuration
mode context:
Syntax: aaa accounting commands [1 |15] [default | <named list>] [none | stop-
only] [group {tacacs+ | <group name>}]
Specify the level of commands for which you want to generate accounting:
1 is unprivileged access, which is the basic mode, and 15 is privileged
access, which is the enable mode.
Specify the default accounting list, or replace <named list> to create an
accounting list.
Include the stop-only option if you want an accounting record to be
generated when the user ends his or her session. Include the none option
if you do not want an accounting record to be generated. If you specify
the none option, you cannot include the group option (because a
TACACS+ server is not required).
Include the group tacacs+ option if you want the ProCurve Secure Router
to send the accounting information to the default group of TACACS+
servers. Replace group <groupname> if you want to specify a TACACS+
group that you created. You can specify more than one group.
2. You can configure the ProCurve Secure Router to send updates to the
TACACS+ server for either of the following:
• all new connections or logins
• outbound Telnet connections