Configuring TACACS+ Accounting

SonicOS supports TACACS+ accounting Start, Watchdog and Stop messages, but not the TACACS+ accounting proxy, that is, SonicOS does not forward the accounting request to the accounting server.

 

• Configuring User Accounting

• Testing TACACS Accounting

• Editing TACACS+ Servers

• Deleting TACACS Servers

To configure TACACS+ accounting

1. Navigate to Device > Users > Settings.
2. Click Accounting.
3. Nex to TACACS+ Accounting, click Configure.
4. In the Settings tab click Add Server.
   1. Enter the Host Name or IP Address of the TACACS+ server.
   2. Enter the port number of the server in the Port field. The default is 49.
   3. Enter the shared secret in the Shared Secret and Confirm Shared Secret fields.
   4. If partition is configured, in Authentication Partition select Default.

      Partition feature is not available in the TZ series. This feature is only supported in high-end devices from the NSa 2700 onwards.

   5. Click Save.
5. Click on General Settings.
   1. In the TACACS+ Server Timeout (seconds) field, enter a maximum time out, in seconds, . The default value is 5 seconds.
   2. In the Retries field, enter the maximum number of retries. The default value is 3 retries.
6. To support single connect, select Support Single Connect. This option is not selected by default.
7. To allow encrypted packets, select Packet Encrypted. This option is selected by default.
8. Click Save.