Assign The Named List; Configure Update Settings - HP ProCurve Secure 7000dl Series Basic Management And Configuration Manual

Controlling Management Access to the ProCurve Secure Router
Using the AAA Subsystem to Control Management Access
2-26
Specify the level of commands for which you want to generate accounting: 1
is unprivileged access, which is the basic mode, and 15 is privileged access,
which is the enable mode.
Specify the default accounting list or replace <named list> to create an
accounting list.
Include the stop-only option if you want an accounting record to be generated
when the user ends his or her session. Include the none option if you do not
want an accounting record generated. For example, you may not want any
records generated if a user enters a command at the basic mode context.
Include the group tacacs+ option if you want the ProCurve Secure Router to
send the accounting information to the default group of TACACS+ servers.
Replace group <groupname> with a group that you created. You can specify
more than one group.

Assign the Named List

To assign the named list to a console, Telnet, or SSH line, you must move to
the appropriate line configuration mode context. If you want to record con-
figuration activities for all Telnet and SSH lines, you must ensure that you
assign the named list to all of the Telnet or SSH lines that you have enabled.
For example, if you have enabled all five Telnet lines, you must assign the
named list to all five lines.
From the appropriate line configuration mode context, enter:
Syntax: accounting commands [1 | 15] [default | <named list>]
For example, you might create a named list called Account and then assign it
to all of the Telnet lines. You might also include the 15 option because you
want this named list to record information about the commands entered from
the privileged mode. From the global configuration mode context, enter:
ProCurve (config)# line telnet 0 4
ProCurve (config-telnet04)# accounting commands 15 Account

Configure Update Settings

You can configure when the ProCurve Secure Router sends updates to the
TACACS+ server. To configure updates, enter the following command from
the global configuration mode context:
Syntax: aaa accounting update [newinfo | periodic <minutes>]