Installation guide

27
Enhancements
Release Y.11.16 Enhancements
– Optional—if you are also configuring the switch for RADIUS authentication, and need
a unique encryption key for use during authentication sessions with the RADIUS server
you are designating, configure a server-specific key. This key overrides the global
encryption key you can also configure on the switch, and must match the encryption key
used on the specified RADIUS server.
2. (Optional) Reconfigure the desired Acct-Session-ID operation.
• Unique (the default setting): Establishes a different Acct-Session-ID value for each
service type, and incrementing of this ID per CLI command for the Command service type.
(Refer to “Unique Acct-Session-ID Operation” on page 22.)
• Common: Establishes the same Acct-Session-ID value for all service types, including suc-
cessive CLI commands in the same management session.
3. Configure accounting types and the controls for sending reports to the RADIUS server.
• Accounting types:
– exec (page 21)
– network (page 21)
– system (page 21)
– commands (page 22)
• Trigger for sending accounting reports to a RADIUS server: At session start and stop
or only at session stop
4. (Optional) Configure session blocking and interim updating options
• Updating: Periodically update the accounting data for sessions-in-progress.
• Suppress accounting: Block the accounting session for any unknown user with no user-
name access to the switch.
1. Configure the Switch To Access a RADIUS Server. Before you configure the actual account-
ing parameters, you should first configure the switch to use a RADIUS server. You need to repeat this
step here only if you have not yet configured the switch to use a RADIUS server, your server data has
changed, or you need to specify a non-default UDP destination port for accounting requests. Note
that switch operation expects a RADIUS server to accommodate both authentication and accounting.