Dell Command Line Reference Guide for the S4048–ON System 9.14.2.4

To disable AAA Accounting, use the no aaa accounting {commands {level | role role-name | dot1x | exec | rest | suppress | system} {name | default} {start-stop | wait-start | stop-only} {radius | tacacs+} command.

system

Enter the keyword system to send accounting information of any other AAA configuration.

exec

Enter the keyword exec to send accounting information when a user has logged in to EXEC mode.

dot1x

Enter the keyword dot1x to send accounting information when a dot1x user has logged in.

commands {level | role role-name}

Enter the keyword commands then a privilege level for accounting of commands executed at that privilege level or enter the keyword role then the role name for accounting of commands executed by a user with that user role.

name | default

Enter one of the following:

• For name, enter a user-defined name of a list of accounting methods.
• For default, the default accounting methods used.

start-stop

Enter the keywords start-stop to send a “start accounting” notice at the beginning of the requested event and a “stop accounting” notice at the end of the event.

wait-start

Enter the keywords wait-start to ensure that the TACACS+ security server acknowledges the start notice before granting the user’s process request.

stop-only

Enter the keywords stop-only to instruct the TACACS+ security server to send a “stop record accounting” notice at the end of the requested user process.

radius

Enter the keyword radius to use RADIUS service for exec and dot1x accounting.

tacacs+

Enter the keyword tacacs+ to use TACACS+ service for accounting.

This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide.

Version

Description

9.14(1.5)

Added support for RADIUS accounting.

9.10(0.1)

Introduced on the S6010-ON and S4048T-ON.

9.10(0.0)

Introduced on the S3148.

9.10(0.0)

Introduced on the S6100-ON.

9.8(2.0)

Introduced on the S3100 series.

9.8(1.0)

Introduced on the Z9100-ON.

9.8(0.0P5)

Introduced on the S4048-ON.

9.8(0.0P2)

Introduced on the S3048-ON.

9.7(0.0)

Introduced on the S6000–ON.

9.5(0.0)

Added support for roles on the Z9000, S6000, S4820T, S4810, and MXL

9.2(1.0)

Introduced on the Z9500.

9.0.2.0

Introduced on the S6000.

8.3.19.0

Introduced on the S4820T.

8.3.11.1

Introduced on the Z9000.

8.3.7.0

Introduced on the S4810.

7.6.1.0

Introduced on the S-Series.

7.5.1.0

Introduced on the C-Series.

6.3.1.0

Introduced on the E-Series.

In the example below, TACACS+ accounting is used to track all usage of EXEC command and commands on privilege level 15.

Privilege level 15 is the default. If you want to track usage at privilege level 1 for example, use the aaa accounting command 1 command.

DellEMC(conf)# aaa accounting exec default start-stop tacacs+
DellEMC(conf)# aaa accounting command 15 default start-stop tacacs+
DellEMC(conf)# aaa accounting command role secaadmin default start-stop tacacs+

DellEMC(conf)# aaa accounting dot1x default start-stop radius 
DellEMC(conf)# aaa accounting dot1x default stop-only radius

• enable password — changes the password for the enable command.
• login authentication — enables AAA login authentication on the terminal lines.
• password — creates a password.
• tacacs-server host — specifies a TACACS+ server host.