User Manual

90
Users Manual of XGS-6350-24X4C
username exec1 password 0 abc privilege 15
username exec2 password 0 abc privilege 10
username exec3 nopassword
username exec4 password 0 abc user-maxlinks 10
username exec5 password 0 abc autocommand telnet 172.16.20.1
!
The lines in this sample RADIUS authorization configuration are defined as follows: :
 The aaa authentication login default local command defines the default method list of login
authentication. This method list applies to all login authentication servers automatically.
 The aaa authorization exec default local command defines default method list of exec authorization. The
method list automatically applies to all users that need to enter exec shell.
 Username is exec1，login password is abc，EXEC privileged level is 15(the highest level)，that is, when
user exec1 whose privileged level is 15 logs in exec shell, all commands can be checked and
performed.
 Username is exec2，login password is abc，EXEC privileged level is 10，that is, when user exec2 whose
privileged level is 10 logs in EXEC shell, commands with privileged level less than 10 can be checked
and performed.
 Username is exec3，no password is needed for login.
 Username is exec4，login password is abc，the maximum links of the user is 10.
 Username is exec5，login password is abc, user performs telnet 172.16.20.1 immediately when logging
in exec shell.
6.1.9 AAA Accounting Configuration Task List
 Configuring Connection Accounting using AAA
 Configuring Network Accounting using AAA
6.1.10 AA Accounting Configuration Task
To configure AAA accounting, perform the following configuration processes:
(1) If you decide to use a separate security server, configure security protocol parameters, such as RADIUS,
TACACS+, or Kerberos.
(2) Define the method lists for accounting by using an AAA accounting command.
(3) Apply the method lists to a particular interface or line, if required.
6.1.10.1 Configuring Accounting Connection Using AAA
Use the aaa accounting command to enable AAA accounting.
To create a method list to provide accounting information about all outbound connections made from the
network access server, use the aaa accounting connection command.
Command Purpose