H3C Technologies H3C SecBlade LB Cards - Manual (Page 88)

77
2. Determine the access type or service type to be configured. With AAA, you can configure an
accounting method for each access type and service type to limit the accounting protocols that can
be used for access.
3. Determine whether to configure an accounting method for all access types or service types.
Configuration guidelines
When configuring accounting methods, follow these guidelines:
• You can configure a default accounting method for an ISP domain. This method will be used for all
users who support the accounting method and have no specific accounting method configured.
• You can configure local accounting (local) or no accounting (none) as the backup for remote
accounting that is used when the remote accounting server is unavailable.
• Local accounting (local) and no accounting (none) cannot have a backup method.
• Accounting is not supported for FTP services.
• If you enable the accounting optional feature, the limit on the number of local user connections
does not take effective.
Configuration procedure
To configure accounting methods for an ISP domain:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter ISP domain view. domain isp-name N/A
3. Enable the accounting
optional feature.
accounting optional
Optional.
Disabled by default.
With the accounting optional
feature, a device allows users
to use network resources when
no accounting server is
available or communication
with all accounting servers
fails.
4. Specify the default accounting
method for all types of users.
accounting default { hwtacacs-scheme
hwtacacs-scheme-name [ local ] | local
| none | radius-scheme
radius-scheme-name [ local ] }
Optional.
The default accounting method
is local for all types of users.
5. Specify the command
accounting method.
accounting command
hwtacacs-scheme
hwtacacs-scheme-name
Optional.
The default accounting method
is used by default.
6. Specify the accounting
method for login users.
accounting login { hwtacacs-scheme
hwtacacs-scheme-name [ local ] | local
| none | radius-scheme
radius-scheme-name [ local ] }
Optional.
The default accounting method
is used by default.