QTECH SmartEdge 600 Configuration - Manual (Page 9)

Overview
1.2 Authorization and Reauthorization
The following sections describe the authorization and reauthorization features.
1.2.1 CLI Commands Authorization
You can specify that commands with a matching privilege level (or higher)
require authorization through TACACS+.
1.2.2 Dynamic Subscriber Reauthorization
When subscribers request new or modified services during active sessions, the
requests can be translated to changes that are applied during the active session
through dynamic subscriber reauthorization. Reauthentication occurs without
PPP renegotiation and without interrupting or dropping the active session.
1.3 Accounting
The following sections describe the accounting features.
1.3.1 CLI Commands Accounting
You can configure the router so that accounting messages are sent to a
TACACS+ server whenever an administrator enters commands at the specified
privilege level (or higher).
1.3.2 Administrator Accounting
You can configure administrator accounting, which tracks messages for the
administrator sessions; the messages are sent to a RADIUS or TACACS+
server.
1.3.3 Subscriber Accounting
You can configure subscriber accounting, which tracks messages for subscriber
sessions; the messages are sent to a RADIUS accounting server. Use the
aaa accounting subscriber
command with the radius keyword to
configure subscriber accounting. When the IP address or hostname of the
RADIUS accounting server is configured in the router local context, global
authentication is performed. That is, although the subscribers are configured
in a non-local context, accounting messages for subscribers sessions in the
context are sent through the RADIUS accounting server configured in the local
context. When using global RADIUS subscriber accounting, configuring global
RADIUS subscriber authentication is required.
5 61/1543-CRA 119 1170/1 Uen L | 2012-12-04