Enabling command accounting – Brocade Network OS NETCONF Operations Guide v4.1.1 User Manual

Page 244

Advertising
background image

212

Network OS NETCONF Operations Guide

53-1003231-02

TACACS+ accounting

16

</edit-config>

</rpc>

<rpc-reply message-id="919" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">

<ok/>

</rpc-reply>

4. Issue the <get-config> RPC with a subtree filter to limit the output to information under the

<aaa-config>/<aaa>/<accounting> node to verify the configuration.

<?xml version="1.0" encoding="UTF-8"?>

<rpc message-id="920" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">

<get-config>

<source>

<running/>

</source>

<filter type="subtree">

<aaa-config xmlns="urn:brocade.com:mgmt:brocade-aaa">

<aaa>

<accounting/>

</aaa>

</aaa-config>

</filter>

</get-config>

</rpc>

<rpc-reply message-id="920" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">

<aaa-config xmlns="urn:brocade.com:mgmt:brocade-aaa">

<aaa>

<accounting>

<exec>

<defaultacc>

<start-stop>

<server-type>taccacs+</server-type>

</start-stop>

</defaultacc>

</exec>

</accounting>

</aaa>

</aaa-config>

</rpc>

Enabling command accounting

The following procedure enables login accounting on a switch where login accounting is enabled
and command accounting is disabled.

1. Issue the <edit-config> RPC to configure the <aaa-config> node in the

urn:brocade.com:mgmt:brocade-aaa namespace.

2. Under the <aaa-config> node, include the

<aaa>/<accounting>/<command>/<defaultacc>/<start-stop> hierarchy of node elements.

3. Under the <start-stop> node, include the <server-type> element and specify tacacs+ as the

server type.

<?xml version="1.0" encoding="UTF-8"?>

<rpc message-id="921" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">

<edit-config>

Advertising