Dell Force10 MXL Blade MXL 10/40GbE Switch IO Module Configuration Guide - Page 476

www.dell.com | support.dell.com • Configure AAA Accounting for Terminal Lines (optional) • Monitor AAA Accounting (optional) Enable AAA Accounting To create a record for any or all of the accounting functions monitored, use the aaa accounting command. To enable AAA accounting, perform the following task in CONFIGURATION mode: Command Syntax Command Mode Purpose aaa accounting {system | exec | command level} {default | name} {start-stop | wait-start | stop-only} {tacacs+} CONFIGURATION Enable AAA accounting and create a record for monitoring the accounting function. The variables are: • system-sends accounting information of any other AAA configuration. • exec-sends accounting information when a user has logged in to the EXEC mode. • command level-sends accounting of commands executed at the specified privilege level. • default | name-Enter the name of a list of accounting methods. • start-stop-Use for more accounting information, to send a start-accounting notice at the beginning of the requested event and a stop-accounting notice at the end. • wait-start-ensures that the TACACS+ security server acknowledges the start notice before granting the user's process request. • stop-only-Use for minimal accounting; instructs the TACACS+ server to send a stop record accounting notice at the end of the requested user process. • tacacs+ -Designate the security service. Currently, FTOS supports only TACACS+ Suppress AAA Accounting for Null Username Sessions When you activate AAA accounting, the FTOS software issues accounting records for all users on the system, including users whose username string, because of protocol translation, is NULL. An example of this is a user who comes in on a line where the AAA authentication login method-list none command is applied. To prevent accounting records from being generated for sessions that do not have usernames associated with them, perform the following task in CONFIGURATION mode: Command Syntax aaa accounting suppress null-username Command Mode Purpose CONFIGURATION Prevent accounting records from being generated for users whose username string is NULL 474 | Security