Defining The Default Accounting Method - Cisco 4700M Configuration Manual

Defining the Default Accounting Method

Defining the Default Accounting Method
Caution
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
2-48
Accounting refers to the log information that is maintained for each user's
management session with an ACE. This information may be used to generate
reports for troubleshooting and auditing purposes. Accounting can be
implemented locally on the ACE or remotely using a RADIUS or TACACS+
server.
Use the aaa accounting default command to configure the default accounting
method. You specify either a previously created AAA server group that identifies
separate groups of TACACS+ or RADIUS servers or the local database on the
ACE.
The syntax of this command is as follows:
aaa accounting default {group group_name} {local} {none}
The arguments and keywords are as follows:
group group_name—Associates the accounting method with a TACACS+ or
•
RADIUS server defined previously through the aaa group server command.
The server group name is a maximum of 64 alphanumeric characters with no
spaces.
local—Specifies to use the local database on the ACE as the accounting
•
method.
none—Specifies that the ACE does not perform password verification, which
•
disables password verification. If you configure this option, users can log in
without providing a valid password.
Use this option with care. If configured, any user will be able to access the ACE
at any time.
For example, to enable user accounting to be performed using remote TACACS+
servers, followed by local login as the fallback method, enter:
host1/Admin(config-context)# aaa accounting default group TacServers
local
To revert to the default local accounting method, enter:
host1/Admin(config-context)# no aaa accounting default group
TacServers local
Chapter 2 Configuring Authentication and Accounting Services
OL-16202-01