Access-method, remote-port & access-privileges attributes

The enhanced-accounting attributes added in this feature are categorized into access-method/authentication-type, remote-port, and access-privileges. Access-method is the authentication mechanism used in authenticating a user. You can set access-method as local or remote, or both. You set access-method as local if the user is locally configured, and the authentication is done using the local password. You set access-method as remote if the user is to be authenticated using a remote authentication server (RADIUS/TACACS+). Remote-port is the client's TCP port used in the current established session. Access-privileges consists of five attributes: user-permissions, allow-commands, deny-commands, allow-configuration, and deny-configuration. You can configure each of these for local access or remote access, or for both modes. Separate accounting attributes for each of these five privileges are added. The corresponding merged set of local and remote privileges are sent in each of these accounting attributes.