Allied Telesis AT-S95 CLI - Manual (Page 47)

AAA Commands
Page 47
Command Mode
Global Configuration mode.
User Guidelines
•
This command enables the recording of device management sessions (Telnet, serial and Web, but not
SNMP).
• It records only users that were identified with a username (for example, a user logged in with a line password
is not recorded).
• If accounting is activated, the device sends a Start/Stop messages to a RADIUS server when a user
logs in/logs out, respectively.
• The device uses the configured priorities of the available RADIUS servers to select the RADIUS server to
use.
• The following table describes the supported RADIUS accounting Attribute Values when they are sent by the
switch:
Example
The following example defines the accounting of device management sessions to a RADIUS server.
aaa accounting dot1x
The aaa accounting dot1x Global Configuration mode command defines accounting of 802.1x sessions. Use the
no form of this command to disable 802.1x accounting.
Syntax
aaa accounting dot1x {radius}
no aaa accounting dot1x
Name Start Stop Description
User-Name (1) Yes Yes The user identity.
NAS-IP-Address (4) Yes Yes The switch IP address that is used for the session
with the RADIUS server.
Class (25) Yes Yes An arbitrary value is included in all accounting
packets for a specific session.
Called-Station-ID (30) Yes Yes The switch IP address that is used for the
management session.
Calling-Station-ID (31) Yes Yes The user IP address.
Acct-Session-ID (44) Yes Yes A unique accounting identifier.
Acct-Authentic (45) Yes Yes Indicates how the supplicant was authenticated.
Acct-Session-Time (46) No Yes Indicates how long the user was logged in.
Acct-Terminate-Cause (49) No Yes Reports why the session was terminated.
Console(config)# aaa accounting login radius