User`s manual

DWS-1008 User’s Manual

D-Link Systems, Inc.

Conguring AAA for Administrative and Local Access

To congure accounting for administrative logins over the network at EXAMPLE, enter the

following command:

set accounting admin EXAMPLE\* start-stop | stop-only aaa-method

You can select either start-stop or stop-only accounting modes. The stop-only mode

sends only stop records, whereas start-stop sends both start and stop records, effectively

doubling the number of accounting records. In most cases, stop-only is entirely adequate

for administrative accounting, because a stop record contains all the information you might

need about a session.

In the set accounting command, you must include AAA methods that specify whether to

use the local database or RADIUS server to receive the accounting records. Specify local,

which causes the processing to be done on the DWS-1008 switch, or specify a RADIUS

server group.

For example, you can set accounting for administrative users using the start-stop mode via

the local database:

DWS-1008# set accounting admin EXAMPLE\* start-stop local

success: change accepted.

The accounting records show the date and time of activity, the user’s status and name, and

other attributes. The show accounting statistics command displays accounting records

for administrative users after they have logged in to the DWS-1008 switch.

For example, the following accounting records show information about user Geetha’s

sessions:

DWS-1008# show accounting statistics

Sep 26 11:01:48 Acct-Status-Type=START Acct-Authentic=0 User-Name=Geetha

AAA_TTY_ATTR=2 Event-Timestamp=1064599308

Sept 26 12:50:21 Acct-Status-Type=STOP Acct-Authentic=0 User-Name=Geetha

AAA_TTY_ATTR=2 Acct-Session-Time=6513 Event-Timestamp=1064605821

Acct-Output-Octets=332 Acct-Input-Octets=61

Sep 26 12:50:33 Acct-Status-Type=START Acct-Authentic=0 User-Name=Geetha

AAA_TTY_ATTR=2 Event-Timestamp=1064605833