Ohradil bych se proti nekolika vecem
- nepouzivejte zasadne "write", ale "write term", protoze pokud pri aaa neco zkazite, nemusite se na to cisco dostat - bude to psat "command authorization failed", pri "write term" to staci pak pouze zrestartnout, a jste v pohode
- je vcelku dobre nadefinovat timeout (tacacs-server timeout)
- u "aaa accounting" chybi sluvko "default", takze to melo byt "aaa accounting exec default stop-only tacacs+", i kdyz je obcas lepsi (vzhledem k hledani chyb) pouzivat start-stop misto stop-only
a navic, exec nam neukaze delku PPP spojeni, takze musite dopsat i "aaa accounting network default start-stop tacacs+"