Brocade Network OS Administrator’s Guide v4.1.1 - Manual (Page 290)

operations. To enable login or command accounting, at least one TACACS+ server must be
configured. Similarly, if either login or command accounting is enabled, you cannot remove a TACACS
+ server, if it is the only server in the list.
Enabling login accounting
The following procedure enables login accounting on a switch where accounting is disabled.
1. In privileged EXEC mode, use the configure terminal command to enter global configuration
mode.
switch# configure terminal
Entering configuration mode terminal
2. Enter the aaa accounting default exec start-stop tacacs+ command to enable login accounting.
switch(config)# aaa accounting exec default start-stop tacacs+
3. Enter the do show running-config aaa accounting command to verify the configuration.
switch(config)# do show running-config aaa accounting
aaa accounting exec default start-stop tacacs+
aaa accounting commands default start-stop tacacs+
Enabling command accounting
The following procedure enables login accounting on a switch where login accounting is enabled and
command accounting is disabled.
1. In privileged EXEC mode, enter configure terminal to enter global configuration mode.
switch# configure terminal
Entering configuration mode terminal
2. Enter aaa accounting default command start-stop tacacs+ to enable command accounting.
switch(config)# aaa accounting command default start-stop tacacs+
3. Enter exit to return to privileged EXEC mode.
switch(config)# exit
4. Enter do show running-config aaa accounting to verify the configuration.
switch# show running-config aaa accounting
aaa accounting exec default start-stop none
aaa accounting commands default start-stop tacacs+
Disabling accounting
You have two options to disable accounting, either by using the aaa accounting command, with the
none option or by using the no form of the command. Both variants are functionally equivalent. You
must perform the disable operation separately for login accounting and for command accounting. The
operation is performed in the global configuration mode.
This example shows two ways of disabling command accounting. The commands are executed in the
global configuration mode.
switch(config)# aaa accounting commands default start-stop none
switch(config)# no aaa accounting commands default start-stop
This example shows two ways of disabling login accounting.
switch(config)# aaa accounting exec default start-stop none
switch(config)# no aaa accounting exec default start-stop
Viewing the TACACS+ accounting logs
The following excerpts from TACACS+ accounting logs exemplify typical success and failure cases for
command and login accounting. These examples were taken from the free TACACS+ server. The
order of the attributes may vary depending on the server package, but the values are the same. The
location of the accounting logs depend on the server configuration.
Enabling login accounting
290 Network OS Administrator’s Guide
53-1003225-04