HP procurve 2500 Benutzerhandbuch
115
Enhancements in Release F.04.08
Configuring RADIUS Authentication and Accounting
Configuring RADIUS Authentication and Accounting
N o t e
This section assumes you have already:
■
Configured RADIUS authentication on the switch for one or more access methods
■
Configured one or more RADIUS servers to support the switch
If you have not already done so, refer to “General RADIUS Setup Procedure” on page 104 before
continuing here.
continuing here.
RADIUS accounting collects data about user activity and system events and sends it to a RADIUS
server when specified events occur on the switch, such as a logoff or a reboot. The Series 2500
switches support three types of accounting services:
server when specified events occur on the switch, such as a logoff or a reboot. The Series 2500
switches support three types of accounting services:
■
Network accounting:
Provides records containing the information listed below on clients
directly connected to the switch and operating under Port-Based Access Control (802.1X):
(For 802.1X information on the Series 2500 switches, refer to “Configuring Port-Based Access Control
(802.1X)” on page 29.)
(802.1X)” on page 29.)
■
Exec accounting:
Provides records containing the information listed below about login
sessions (console, Telnet, and SSH) on the switch:
[no] aaa accounting update
periodic < 1 .. 525600 > (in minutes)
periodic < 1 .. 525600 > (in minutes)
page 121
[no] aaa accounting suppress null-username
page 121
show accounting
page 125
show accounting sessions
page 125
show radius accounting
page 125
• Acct-Session-Id
• Acct-Status-Type
• Acct-Terminate-Cause
• Acct-Authentic
• Acct-Status-Type
• Acct-Terminate-Cause
• Acct-Authentic
• Acct-Delay-Time
• Acct-Input-Packets
• Acct-Output-Packets
• Acct-Input-Octets
• Acct-Input-Packets
• Acct-Output-Packets
• Acct-Input-Octets
• Nas-Port
• Acct-Output-Octets
• Acct-Session-Time
• User-Name
• Acct-Output-Octets
• Acct-Session-Time
• User-Name
• Service-Type
• NAS-IP-Address
• NAS-Identifier
• Called-Station-Id
• NAS-IP-Address
• NAS-Identifier
• Called-Station-Id
• Acct-Session-Id
• Acct-Status-Type
• Acct-Terminate-Cause
• Acct-Authentic
• Acct-Status-Type
• Acct-Terminate-Cause
• Acct-Authentic
• Acct-Delay-Time
• Acct-Session-Time
• User-Name
• Service-Type
• Acct-Session-Time
• User-Name
• Service-Type
• NAS-IP-Address
• NAS-Identifier
• Calling-Station-Id
• NAS-Identifier
• Calling-Station-Id
RADIUS Accounting Commands