beautypg.com

H3C Technologies H3C S7500E Series Switches User Manual

Page 78

background image

3-39

To do…

Use the command…

Remarks

Enable command

accounting

command accounting

Optional

z

By default, command accounting

is disabled. The accounting

server does not record the

commands executed by users.

z

Command accounting allows the

HWTACACS server to record all

executed commands that are

supported by the device,

regardless of the command

execution result. This helps

control and monitor user

operations on the device. If

command accounting is enabled

and command authorization is

not enabled, every executed

command is recorded on the

HWTACACS server. If both

command accounting and

command authorization are

enabled, only the authorized and

executed commands are

recorded on the HWTACACS

server.

Exit to system view

quit

Enter the

default ISP

domain view

domain domain-name

Configure

the

authentic

ation

mode

Apply the

specified AAA

scheme to the

domain

authentication default

{ hwtacacs-scheme

hwtacacs-scheme-name [ local ] | local

| none | radius-scheme

radius-scheme-name [ local ] }

Optional

By default, the AAA scheme is

local.

If you specify the local AAA scheme,

perform the configuration

concerning local user as well. If you

specify an existing scheme by

providing the radius-scheme-name