H3C Technologies H3C S7500E Series Switches User Manual

Page 49

Advertising
background image

3-10

To do…

Use the command…

Remarks

Enable command accounting

command accounting

Optional

z

By default, command accounting

is disabled. The accounting

server does not record the

commands executed by users.

z

Command accounting allows the

HWTACACS server to record all

the commands executed by

users, regardless of command

execution results. This helps

control and monitor user

operations on the device. If

command accounting is enabled

and command authorization is

not enabled, every executed

command is recorded on the

HWTACACS server. If both

command accounting and

command authorization are

enabled, only the authorized and

executed commands are

recorded on the HWTACACS

server.

Return to system view

quit

Enter the ISP

domain view

domain domain-name

Configure

the

authentic

ation

mode

Apply the

specified AAA

scheme to the

domain

authentication default

{ hwtacacs-scheme

hwtacacs-scheme-name [ local ] |

local | none | radius-scheme

radius-scheme-name [ local ] }

Optional

By default, the AAA scheme is

local.

If you specify the local AAA scheme,

you need to perform local user

configuration. If you specify an

existing scheme by providing the

Advertising