Configuring Accounting For Asa - Alcatel-Lucent OmniSwitch 6450 Management Manual

Configuring Accounting for ASA

Configuring Accounting for ASA
Accounting servers track network resources such as time, packets, bytes, and user activity (when a user
logs in and out, how many login attempts were made, session length, and so on.). The accounting servers
can be located anywhere in the network.
Note the following:
• Up to four servers can be configured.
• The servers can be of different types.
• ACE cannot be used as an accounting server.
• The keyword local must be specified if you want accounting to be performed via the Switch Logging
feature in the switch. If local is specified, it must be the last server in the list.
External accounting servers are configured through the
commands. These commands are described in "Managing Authentication Servers" in the OmniSwitch
6250/6450 Network Configuration Guide.
To enable accounting (logging a user session) for Authenticated Switch Access, use the
aaa accounting mac
servers have already been configured through the aaa radius-server and aaa ldap-server commands.
-> aaa accounting session rad1 ldap2 local
After this command is entered, accounting will be performed through the rad1 RADIUS server. If that
server is unavailable, the LDAP server, ldap2, will be used for accounting. If that server is unavailable,
logging will be done locally on the switch through the Switch Logging feature. (For more information
about Switch Logging, see the OmniSwitch 6250/6450 Network Configuration Guide.)
To remove an individual server from the list of servers, enter the aaa accounting session command with
the relevant server name(s), removing the desired server from the list. For example:
-> aaa accounting session rad1 local
The server ldap2 is removed as an accounting server.
To disable accounting for Authenticated Switch Access, use the no form of the aaa accounting session
command:
-> no aaa accounting session
Accounting will not be performed for Authenticated Switch Access sessions.
page 10-12
command with the relevant server name(s). In this example, the RADIUS and LDAP
aaa radius-server and
OmniSwitch 6250/6450 Switch Management Guide
Managing Switch Security
aaa tacacs+-server
June 2013