Cisco WS-X6K-S2-PFC2 Software Guide - Page 466

Understanding How Accounting Works Chapter 21 Configuring Switch Access Using AAA In this example, TACACS+ authorization is enabled for enable mode access to the switch for both Telnet and console connections, authorizing configuration commands: Console> (enable) set authorization enable enable tacacs+ deny both Successfully enabled enable authorization. Console> (enable) set authorization commands enable config tacacs+ deny both Successfully enabled commands authorization. Console> (enable) show authorization Telnet: ------- Primary Fallback exec: tacacs+ deny enable: tacacs+ deny commands: config: tacacs+ deny all: - - Console: -------- Primary ------- exec: tacacs+ enable: tacacs+ commands: config: tacacs+ all: - Console> (enable) Fallback -------- deny deny deny - Understanding How Accounting Works These sections describe how the different accounting methods work: • Accounting Overview, page 21-56 • Accounting Events, page 21-57 • Specifying When to Create Accounting Records, page 21-57 • Specifying RADIUS Servers, page 21-58 • Updating the Server, page 21-59 • Suppressing Accounting, page 21-59 Accounting Overview You can configure these accounting methods to monitor access to the switch: • TACACS+ accounting • RADIUS accounting Accounting allows you to track user activity to a specified host, suspicious connection attempts in the network, and unauthorized changes to the NAS configuration itself. The accounting information is sent to the accounting server where it is saved in the form of a record. Accounting information typically consists of the user's action and the duration for which the action lasted. You can use the accounting feature for security, billing, and resource allocation purposes. 21-56 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02