[j-nsp] Radius CLI Accounting

[Scott Ehnert]

Hello Again,

Thank you for the confirmation that radius cli accounting is not
currently supported in JUNOS, as well as the suggestion of using
tacacs+.  I am unable to use tacacs+ as not all of the gear we are
using supports tacacs+ authentication, but they all support radius
auth.  Accounting is less important than Authentication, so I am able
to wait for this to be added to JUNOS.

Can anybody respond regarding JUNOSe and cli accounting?

Regards,

-=Scott

On 7/29/05, Steve Holman <sholman at juniper.net> wrote:
> Sure.  Check out the manual:
> 
> http://www.juniper.net/techpubs/software/junos/junos72/swconfig72-system
> -basics/html/sys-mgmt-misc28.html#1030076
> 
> system {
>     accounting {
>         events [ login change-log interactive-commands ];
>         destination {
>             tacplus {
>                 server {
>                     192.168.1.1 secret "$# SECRET-DATA
>                     192.168.1.2 secret "$# SECRET-DATA
>                 }
>             }
>         }
>     }
> }
> 
> 
> 
> > -----Original Message-----
> > From: Thomas, Steven [mailto:SThomas at birch.com]
> > Sent: Friday, July 29, 2005 6:37 AM
> > To: Steve Holman; Scott Ehnert; juniper-nsp at puck.nether.net
> > Subject: RE: [j-nsp] Radius CLI Accounting
> > Importance: High
> >
> >
> > Junos may not do RADIUS CLI accounting, but it does do TACACS
> > CLI accounting.  Junose will do CLI accounting via syslog.
> >
> > -----Original Message-----
> > From: juniper-nsp-bounces at puck.nether.net
> > [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Steve Holman
> > Sent: Thursday, July 28, 2005 6:31 PM
> > To: Scott Ehnert; juniper-nsp at puck.nether.net
> > Subject: RE: [j-nsp] Radius CLI Accounting
> >
> > It is currently not supported on JUNOS, but stay tuned.  Not
> > sure about JUNOSe.
> >
> > Steve
> >
> > > -----Original Message-----
> > > From: juniper-nsp-bounces at puck.nether.net
> > > [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of
> > Scott Ehnert
> > > Sent: Thursday, July 28, 2005 4:15 PM
> > > To: juniper-nsp at puck.nether.net
> > > Subject: [j-nsp] Radius CLI Accounting
> > >
> > >
> > > Hello,
> > >
> > > I am trying to setup RADIUS accounting for all commands
> > > issued at the CLI.  I am working with both JUNOS and JUNOSe.
> > > Authentication is working fine.  It looks like the Accounting
> > > functionality that I am looking for does not exist.  Can
> > > someone verify that is the case, or if it is not that way,
> > > can you point me in the right direction?
> > >
> > > JUNOS [7.2R2.4]
> > > JUNOSe Version: 5.3.3
> > >
> > >
> > > Thank you,
> > >
> > > -=Scott
> > >
> > > _______________________________________________
> > > juniper-nsp mailing list juniper-nsp at puck.nether.net
> > > http://puck.nether.net/mailman/listinfo/junipe> r-nsp
> > >
> >
> > _______________________________________________
> > juniper-nsp mailing list juniper-nsp at puck.nether.net
> > http://puck.nether.net/mailman/listinfo/juniper-nsp
> >
>