Dell PowerConnect 8100 CLI Reference Guide - Page 238

support the concept of time-out, subsequent entries in the list are never attempted. For example, the local authentication method implementation does not supply a time-out value. If a list contains the local method, followed by the radius authentication method, the radius method is not attempted. Once an APL is created, a reference to that APL can be stored in the access line configuration to determine how specific components should authenticate users. The APL and associated component ID are stored together. A single APL can be referenced by multiple users and components. The administrator can enable/disable/reorder authentication methods on a per method basis (see above). TACACS+ Accounting The administrator may choose to account user activity on the switch. The following accounting types are supported: • User exec sessions: User login and logout times are noted and conveyed to an external AAA server. • User executed commands: Commands executed by the user and the time of execution are accounted and conveyed to an external AAA server. User activity can be accounted for at the end and/or at the beginning of the activity. For this purpose, the following record-types are defined: • Start-stop Accounting notifications are sent when the user logs into the switch and when the user logs out of the exec mode. Accounting notifications are also sent at the beginning and at the end of the user executed command. Command execution does not wait for the accounting notification to be recorded at the AAA server. • Stop-only Accounting notification is sent when user logs out of the exec mode. The duration of the exec session is mentioned in the accounting notice. Accounting notifications are sent at the end of each user executed command. In the case of commands like reload, and clear config, an exception is made and the stop accounting notice is sent at the beginning of the command. 238 AAA Commands