The following table lists the sequence of authentication, authorization, and accounting
(AAA) operations that take place when a user gains access to a
RUCKUS device that has RADIUS security configured. For each action the user takes, there
are certain applicable AAA operations that occur. This table is presented as a means
to troubleshoot possible issues with AAA configuration.
| User Action
|
Applicable AAA Operations
|
| User attempts to gain access to the Privileged EXEC and CONFIG levels of the CLI
|
Enable authentication: aaa authentication enable default method-list
|
| System accounting start: aaa accounting system default start-stop method-list
|
| User logs in using Telnet/SSH
|
Login authentication: aaa authentication login default method-list
|
| EXEC accounting Start: aaa accounting exec default start-stop method-list
|
| System accounting Start: aaa accounting system default start-stop method-list
|
| User logs into the Web Management Interface
|
Web authentication: aaa authentication web-server default
method-list |
| User logs out of Telnet/SSH session
|
Command authorization for
logout command: aaa authorization commands privilege-level default method-list
|
| Command accounting: aaa accounting commands privilege-level default start-stop method-list
|
| EXEC accounting stop: aaa accounting exec default start-stop method-list
|
User enters system commands (for example,
reload,
boot system)
|
Command authorization: aaa authorization commands privilege -level default method-list
|
| Command accounting: aaa accounting commands privilege-level default start-stop method-list
|
| System accounting stop: aaa accounting system default start-stop method-list
|
User enters the command:
[no] aaa accounting system default start-stop method-list |
Command authorization: aaa authorization commands privilege-level default method-list
|
| Command accounting: aaa accounting commands privilege-level default start-stop method-list
|
| System accounting start: aaa accounting system default start-stop method-list
|
| User enters other commands
|
Command authorization: aaa authorization commands privilege-level default method-list
|
| Command accounting: aaa accounting commands privilege-level default start-stop method-list
|