Hub/Switch Reference Guide

190 AAA Commands
NN47250-100 (Version 02.51)
Syntax set accounting {dot1x | mac | web | last-resort} {ssid ssid-name | wired} {user-
wildcard | mac-addr-wildcard} {start-stop | stop-only}
method1 [method2] [method3] [method4]
Defaults Accounting is disabled for all users by default.
Access Enabled.
dot1x Users with network access through the WSS who are authenticated by
802.1X.
mac Users with network access through the WSS who are authenticated by
MAC authentication
web Users with network access through the WSS who are authenticated by
Web-based AAA
ssid ssid-name SSID name to which this accounting rule applies. To apply the rule to all
SSIDs, type any.
wired Applies this accounting rule specifically to users who are authenticated
on a wired authentication port.
user-wildcard Single user or set of users with administrative access or network access.
Specify a username, use the double-asterisk wildcard character (**) to
specify all usernames, or use the single-asterisk wildcard character (*) to
specify a set of usernames up to or following the first delimiter
character—either an at sign (@) or a period (.). (For details, see “User
Wildcards” on page 12.)
Note: This option does not apply if mac or last-resort is specified. For
mac, specify a mac-addr-wildcard.
mac-addr-wildcard A single user or set of users with access via a MAC address. Specify a
MAC address, or use the wildcard (*) character to specify a set of MAC
addresses. (For details, see “MAC Address Wildcards” on page 13.)
This option applies only when mac is specified.
start-stop Sends accounting records at the start and end of a network session.
stop-only Sends accounting records only at the end of a network session.
method1
method2
method3
method4
At least one of up to four methods that WSS Software uses to process
accounting records. Specify one or more of the following methods in
priority order. If the first method does not succeed, WSS Software tries
the second method, and so on.
A method can be one of the following:
• local—Stores accounting records in the local database
on the WSS. When the local accounting storage space is
full, WSS Software overwrites older records with new
ones.
• server-group-name—Stores accounting records on one
or more Remote Authentication Dial-In User Service
(RADIUS) servers. You can also enter the names of
existing RADIUS server groups as methods.