The following table lists the sequence of user
actions and the related authentication, authorization, and accounting operations
that
take place when a user gains access to a RUCKUS device that has TACACS+
security configured. The operations column in the following table also includes
the
related commands to be configured on the RUCKUS device.
User Actions and Related TACACS+ Operations
| User Action
|
Applicable AAA Operations
|
| User attempts to gain access to the Privileged EXEC and CONFIG levels of the CLI
|
Exec authorization (TACACS+): aaa authorization
exec
default
tacacs+ |
Enable authentication: aaa authentication
enable
default
method-list |
System accounting start (TACACS+): aaa accounting system
default
start-stop
method-list |
| User logs in using Telnet/SSH
|
Exec authorization (TACACS+): aaa authorization
exec default
tacacs+ |
Login authentication: aaa authentication
login
default
method-list |
Exec accounting start (TACACS+): aaa accounting exec
default
method-list |
System accounting start (TACACS+): aaa accounting system
default
start-stop
method-list |
| User logs into the Web Management Interface
|
Web authentication: aaa authentication
web-server default
method-list |
Exec authorization (TACACS+): aaa authorization
exec default
tacacs+ |
| User logs out of Telnet/SSH session
|
Command accounting (TACACS+): aaa accounting
commands privilege-level
defaultstart-stop
method-list |
EXEC accounting stop (TACACS+): aaa accounting exec
default
start-stop
method-list |
User enters system commands (for example,
reload,
boot system)
|
Command authorization (TACACS+): aaa authorization
commands privilege-level
default
method-list |
Command accounting (TACACS+): aaa accounting
commands privilege-level
default
start-stop
method-list |
System accounting stop (TACACS+): aaa accounting system
default
start-stop
method-list |
User enters the command: [no] aaa accounting
system
default
start-stop
method-list |
Command authorization (TACACS+): aaa authorization
commands privilege-level
default
method-list |
Command accounting (TACACS+): aaa accounting
commands privilege-level
default
start-stop
method-list |
System accounting start (TACACS+): aaa accounting system
default
start-stop
method-list |