Installation guide

22
Enhancements
Release Y.11.16 Enhancements
■ Commands accounting: Provides records containing information on CLI command execu-
tion during user sessions.
The switch forwards the accounting information it collects to the designated RADIUS server, where
the information is formatted, stored, and managed by the server. For more information on this aspect
of RADIUS accounting, refer to the documentation provided with your RADIUS server.
Operating Rules for RADIUS Accounting
• You can configure up to four types of accounting to run simultaneously: exec, system,
network, and command.
• RADIUS servers used for accounting are also used for authentication.
• The switch must be configured to access at least one RADIUS server.
• RADIUS servers are accessed in the order in which their IP addresses were configured
in the switch. Use show radius to view the order. As long as the first server is accessible
and responding to authentication requests from the switch, a second or third server will
not be accessed. (For more on this topic, refer to “Changing RADIUS-Server Access
Order” on page 39.)
• If access to a RADIUS server fails during a session, but after the client has been
authenticated, the switch continues to assume the server is available to receive
accounting data. Thus, if server access fails during a session, it will not receive
accounting data transmitted from the switch.
Acct-Session-ID Options in a Management Session
The switch can be configured to support either of the following options for the accounting service
types used in a management session. (Refer to “Accounting Service Types” on page 21.)
■ unique Acct-Session-ID for each accounting service type used in the same management
session (the default)
■ same Acct-Session-ID for all accounting service types used in the same management session
Unique Acct-Session-ID Operation. In the Unique mode (the default), the various service types
running in a management session operate as parallel, independent processes. Thus, during a specific
management session, a given service type has the same Acct-Session-ID for all accounting actions
for that service type. However, the Acct-Session-ID for each service type differs from the ID for the
other types.
• Acct-Session-Id
• Acct-Status-Type
• Service-Type
• Acct-Authentic
•User-Name
• NAS-IP-Address
• NAS-Identifier
• NAS-Port-Type
• Calling-Station-Id
• HP-Command-String
• Acct-Delay-Time