User's Manual

119
10.5.3 TACACS+ Accounting Examples
The following configuration of login authentication’s method table uses TACACS+ as one of the methods to
configure the accounting by TACACS+:
aaa authentication login default group tacacs+ local
aaa accounting exec default start-stop group tacacs+
tacacs-server host 10.1.2.3
tacacs-server key goaway
In this example:
Command aaa authentication defines the default authentication method table default during login
authentication. If authentication required, keyword tacacs+ means authentication is by TACACS+. If TACACS+
does not respond, keyword local indicates to use the local database on the network access server for
authentication.
Command aaa accounting does accounting of network service by TACACS+. In this example, the relative
information of starting and beginning time is accounted and sent to TACACS+ server.
Command tacacs-server host marks TACACS+ server’s IP address as 10.1.2.3. command Command tacacs-
server key defines the shared encrypted secret key as goaway.