Cisco WS-C2960-24TT-L User Manual

6-54
Catalyst 2900 Series XL and Catalyst 3500 SeriesXL Software Configuration Guide
78-6511-08
Chapter 6 Configuring the System
Configuring TACACS+
Starting TACACS+ Accounting
You use the aaa accounting command with the tacacs+ keyword to turn on TACACS+ accounting for
each Cisco IOS privilege level and for network services.
Beginning in privileged EXEC mode, follow these steps to enable TACACS+ accounting:
Configuring a Switch for Local AAA
You can configure AAA to operate without a server by setting the switch to implement AAA in local
mode. The switch then verifies authentication and authorization. No accounting is available in this
configuration.
Beginning in privileged EXEC mode, follow these steps to configure the switch for local AAA:
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
aaa accounting exec start-stop
tacacs+
Enable TACACS+ accounting to send a start-record accounting notice at the
beginning of an EXEC process and a stop-record at the end.
Step 3
aaa accounting network start-stop
tacacs+
Enable TACACS+ accounting for all network-related service requests,
including SLIP, PPP, and PPP NCPs.
Step 4
exit Return to privileged EXEC mode.
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
aaa new-model Enable AAA.
Step 3
aaa authentication login default
local
Set the login authorization to default to local.
Step 4
aaa authorization exec local Configure user AAA authorization for all network-related service requests.
Step 5
aaa authorization network local Configure user AAA authorization to determine if the user is allowed to run
an EXEC shell.
Step 6
username name privilege level
password password
Enter the local database.
Repeat this command for each user.

Cisco WS-C2960-24TT-L Specifications

General

Brand	Cisco
Model	WS-C2960-24TT-L
Category	Switch
Language	English