Centralized authentication - tacacs authorization

Information

TACACS+ also allows for commands authorization and accounting, permitting more granular control of command-line access and allowing managers to monitor user sessions and configuration activity on their devices.

Solution

The following commands enable authorization and accounting, handled by servers in the default tacacs group:

switch(config)# aaa authorization commands default group tacacs
switch(config)# aaa accounting all default start-stop group tacacs

See Also

https://support.hpe.com/hpesc/public/docDisplay?docId=a00053695en_us

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2

Plugin: ArubaOS

Control ID: d0b888b545587cb5bc7866ca12d454cf064f75edfd49e391ffd5f78450f83962