topic Re: Viewing Users Activity - Radius in Network Access Control

Viewing Users Activity - Radius

Waheed Bahaduri — Mon, 11 Mar 2019 02:56:42 GMT

Hello,

With TACACS+ we can have (TACACS+ Administration) Logfile on ACS that shows users activity. but with radius there is no such logfile to show usres activity. i want to know is anyother way how to check users activity while using radius-server ?

Regards,

Viewing Users Activity - Radius

Peter Koltl — Sat, 05 Jan 2013 20:06:33 GMT

Favorite Reports > RADIUS Authentications - Today

Viewing Users Activity - Radius

Imran Ahmad — Sun, 06 Jan 2013 03:31:31 GMT

Sorry, but there is no Favorite-Reports>RADIUS Auth option. I'm using ACS 4.2

Re: Viewing Users Activity - Radius

kcnajaf — Sun, 06 Jan 2013 05:16:49 GMT

Hi Imran,

Hope you are refering to Radius Authentication Logs here..

For ACS 4.2 go to Report and Activity --> Passed Authentication or Failed Authentication to see the Radius Logs.

Also please be aware that in order to see these logs you need to ensure that Logging in enabled on the System Configuration--> Logging as below using the ticking CSV.

Hope this helps

Regards

Najaf

Please rate when applicable or helpful !!!

Viewing Users Activity - Radius

Waheed Bahaduri — Sun, 06 Jan 2013 06:42:12 GMT

Hello Najaf,

What you are indecating is authentication, that logfile only shows Authenticated Users, But not thier activities. I want to view what the users are doing? which sources they are accessing ...any other activities...etc

Example- with Tacacs+ Server- it is possible to veiw what commands the user enters.....

Re: Viewing Users Activity - Radius

kcnajaf — Sun, 06 Jan 2013 07:53:37 GMT

Hi Waheed,

I now understand what you are looking for..But unfortunately Radius does not provide this function 😞

Even though Radius and TACACS+ are main protocol typically used for AAA services on network devices, RADIUS was designed to authenticate and log dial-up remoe users to a network and TACACS+ is used mostly commonly for administrator access to network devices.

RADIUS doesn't log the commands used by the administrator. It will only log the start,stop,time/date, username, type of connection, amount of time logged in, and bytes transferred. The TACACS+ protocol was developed to resolve these issues. With TACACS+ each command enter by the user is sent back to ACS for authorization, which then check the command against an authorized list of commands for each user or group.

In short RADIUS does not offer any command logging and hence you will not be able to see them on any report like what you are seeing for TACACS

Hope this helps.

Regards

Najaf

Please rate when applicable or helpful !!!