topic Re: TACACS+ Accounting Question in Network Access Control https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016490#M179243 <HTML><HEAD></HEAD><BODY><P>Excellent therothical reply! Great man!</P></BODY></HTML> Sun, 09 Sep 2012 15:41:49 GMT koguann1409 2012-09-09T15:41:49Z TACACS+ Accounting Question https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016483#M179165 <P>Dear all,</P><P><BR />I would like to know TACACS+ accounting option in cisco.</P><P></P><P>We deployed AAA machine which is Avenda in our operation network and able to capture accounting commands ONLY for valid commands. Does the TACACS+ also can capture invalid commands and send to Avenda (Our AAA machine) ?</P><P>Please help to clarify.</P> Mon, 11 Mar 2019 02:29:28 GMT https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016483#M179165 koguann1409 2019-03-11T02:29:28Z Re: TACACS+ Accounting Question https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016484#M179173 <HTML><HEAD></HEAD><BODY><P><SPAN style="font-family: comic sans ms,sans-serif; color: #3366ff;">Hi,</SPAN></P><P></P><P><SPAN style="font-family: comic sans ms,sans-serif; color: #3366ff;">This is something device specific. In case of IOS it forwards only valid commands to tacacs server. Example- If we issue command "show user" it will log it and if we issue command "show dog" it will not be logged.</SPAN></P><P></P><P></P><P><SPAN style="font-family: comic sans ms,sans-serif; color: #3366ff;">Hope that helps!</SPAN></P><P></P><P><SPAN style="font-family: comic sans ms,sans-serif; color: #3366ff;">Regards,</SPAN></P><P><SPAN style="font-family: comic sans ms,sans-serif; color: #3366ff;">~JG</SPAN></P><P></P><P></P><P><SPAN style="font-family: comic sans ms,sans-serif; color: #3366ff;">Do rate helpful posts</SPAN></P></BODY></HTML> Mon, 03 Sep 2012 19:31:24 GMT https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016484#M179173 Jagdeep Gambhir 2012-09-03T19:31:24Z TACACS+ Accounting Question https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016485#M179179 <HTML><HEAD></HEAD><BODY><P>JG:<BR />Thanks for the info. I didn't know that unknown commands are not being logged with IOS. <SPAN __jive_emoticon_name="plain" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/tiny_mce3/plugins/jiveemoticons/images/spacer.gif"></SPAN> </P><P>Useful info though.</P><P></P><P>Thanks.</P><P></P><P>Amjad</P><P></P><P><SPAN style="color: blue;">You want to say "<SPAN style="color: green; text-decoration: underline; ">Thank you</SPAN>"? <BR /><SPAN style="color: red;"><STRONG>Don't</STRONG></SPAN>. Just rate the useful answers, <BR />that is more useful than "<EM>Thank you<EM>".</EM></EM></SPAN></P></BODY></HTML> Tue, 04 Sep 2012 05:44:51 GMT https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016485#M179179 Amjad Abdullah 2012-09-04T05:44:51Z TACACS+ Accounting Question https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016486#M179190 <HTML><HEAD></HEAD><BODY><P>Hi Jagdeep,</P><P></P><P>Thanks for the useful info. Understood that the IOS version does not sent invalid command. Can i know how about the IOS-XR? Because we are using that particular as well.</P><P></P><P>Thanks</P></BODY></HTML> Sun, 09 Sep 2012 06:43:37 GMT https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016486#M179190 koguann1409 2012-09-09T06:43:37Z TACACS+ Accounting Question https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016487#M179200 <HTML><HEAD></HEAD><BODY><P>Ios-xr is a little different, the software will see which task group the user is mapped to. If the command falls under the task umbrella of the user then accounting will be permitted. Also this works the same for command authorization.</P></BODY></HTML> Sun, 09 Sep 2012 06:55:24 GMT https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016487#M179200 Tarik Admani 2012-09-09T06:55:24Z TACACS+ Accounting Question https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016488#M179204 <HTML><HEAD></HEAD><BODY><P>Hi Thanks, but does it captured the invalid commands and send to accounting AAA server?</P></BODY></HTML> Sun, 09 Sep 2012 15:10:07 GMT https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016488#M179204 koguann1409 2012-09-09T15:10:07Z Re: TACACS+ Accounting Question https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016489#M179222 <HTML><HEAD></HEAD><BODY><P>No, if the command is invalid it will not be authorized so no accounting will be performed. Keep in mind that accounting is the step that is performed after authorization. If a command is not authorized then accounting can not take place.</P><P></P><P>Sent from Cisco Technical Support iPad App</P></BODY></HTML> Sun, 09 Sep 2012 15:15:47 GMT https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016489#M179222 Tarik Admani 2012-09-09T15:15:47Z Re: TACACS+ Accounting Question https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016490#M179243 <HTML><HEAD></HEAD><BODY><P>Excellent therothical reply! Great man!</P></BODY></HTML> Sun, 09 Sep 2012 15:41:49 GMT https://community.cisco.com/t5/network-access-control/tacacs-accounting-question/m-p/2016490#M179243 koguann1409 2012-09-09T15:41:49Z