Reference Guide

772 | Security
www.dell.com | support.dell.com
• Enabling AAA Accounting (mandatory)
• Suppressing AAA Accounting for null username sessions (optional)
• Configuring Accounting of EXEC and privilege-level command usage (optional)
• Configuring AAA Accounting for terminal lines (optional)
• Monitoring AAA Accounting (optional)
Enabling AAA Accounting
The aaa accounting command enables you to create a record for any or all of the accounting functions
monitored. To enable AAA accounting, perform the following task in CONFIGURATION mode:
Suppressing AAA Accounting for null username sessions
When AAA Accounting is activated, the Dell Networking OS software issues accounting records for all
users on the system, including users whose username string, because of protocol translation, is NULL. An
example of this is a user who comes in on a line where the AAA Authentication
login method-list none
command is applied. To prevent accounting records from being generated for sessions that do not have
usernames associated with them, perform the following task in
CONFIGURATION mode:
Command Syntax Command Mode Purpose
aaa accounting {system | exec |
command level} {default | name}
{
start-stop | wait-start | stop-only}
{
tacacs+}
CONFIGURATION Enable AAA Accounting and create a record for
monitoring the accounting function.
The variables are:
• system—sends accounting information of any
other AAA configuration
• exec—sends accounting information when a user
has logged in to the EXEC mode
• command level—sends accounting of commands
executed at the specified privilege level
• default | name—Enter the name of a list of
accounting methods.
• start-stop—Use for more accounting information,
to send a start-accounting notice at the beginning
of the requested event and a stop-accounting
notice at the end.
• wait-start—ensures that the TACACS+ security
server acknowledges the start notice before
granting the user's process request
• stop-only—Use for minimal accounting; instructs
the TACACS+ server to send a stop record
accounting notice at the end of the requested user
process.
• tacacs+ —Designate the security service.
Currently, Dell Networking OS supports only
TACACS+
Command Syntax Command Mode Purpose
aaa accounting suppress null-username
CONFIGURATION Prevent accounting records from being generated for
users whose username string is NULL