1-18z With the accounting optional command configured, a user to be disconnected can still use thenetwork resources even when there is no available accounting server or communication with thecurrent accounting server fails.z The local accounting is not used for accounting implementation, but together with the attributeaccess-limit command for limiting the number of local user connections. However, with theaccounting optional command configured, the limit on the number of local user connections is noteffective.z The accounting method specified with the accounting default command is for all types of usersand has a priority lower than that for a specific access mode.z With the radius-scheme radius-scheme-name local or hwtacacs-schemehwtacacs-scheme-name local keyword and argument combination configured, local accounting isthe backup method and is used only when the remote server is not available.z If the primary accounting method is local or none, the system performs local accounting or doesnot perform any accounting, and will not use the RADIUS or HWTACACS accounting scheme.z In login access mode, accounting is not supported for FTP services.Configuring Local User AttributesFor local authentication, you need to create local users and configure user attributes on the device asneeded.A local user represents a set of user attributes configured on a device and is uniquely identified by theusername. For a user requesting a network service to pass local authentication, you must add an entryas required in the local user database of the device.Each local user belongs to a local user group and bears all attributes of the group. For details aboutlocal user group, refer to Configuring User Group Attributes.When configuring local users and local user groups, pay attention to the effective ranges and priorityrelationship of user group attributes and user attributes.You can configure an authorization attribute in user group view or local user view, making the attributeeffective on all local users of the group or only the local user. An authorization attribute configured inlocal user view takes precedence over the same attribute configured in user group view.Follow these steps to configure the attributes for a local user:To do… Use the command… RemarksEnter system view system-view —Set the password display mode forall local userslocal-userpassword-display-mode { auto| cipher-force }Optionalauto by default, indicatingto display the password ofa local user in the wayindicated by the passwordcommand.Add a local user and enter localuser view local-user user-nameRequiredNo local user exists bydefault.
