topic Re: How do i check accounting once its enabled? in Network Access Control

How do i check accounting once its enabled?

cisco_himg — Sun, 10 Mar 2019 23:41:34 GMT

How do i check to see user activity once its enabled on my ASA? I need help setting up the AAA on a radius server as well in regards to where i set up the server secret key?

Help!

Re: How do i check accounting once its enabled?

Jagdeep Gambhir — Mon, 21 Sep 2009 15:53:15 GMT

Hi Himg,

What type of activity you are looking for ? If you are looking Command accounting, then that is a feature of tacacs server and not radius.

This link with help you with setting up radius authentication.

http://cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c18ff.shtml

Let me know if you have any question.

Regards,

~JG

Do rate helpful posts

Re: How do i check accounting once its enabled?

cisco_himg — Mon, 21 Sep 2009 16:01:23 GMT

Maybe i can go about this another way...

What about this....

I basically want to know when a user logs off and back on WEBVPN. I really dont want to associate to a Radius nor a TACACS. I want to keep all the users to authenticate locally on the ASA. What all do i need to do?

THanks a bunch!

Re: How do i check accounting once its enabled?

Jatin Katyal — Mon, 21 Sep 2009 16:55:28 GMT

radius accounting files contain the following info:

User session's start and stop time frame

AAA client message with username

callier line identification info

session duration

In order to configure this for webvpn user, you need to add this command under webvpn default tunnel group

accounting-server-group

In oder to check share sceret key for any aaa client. Go to network configuration > NDG (if any) > aaa client edit > look for shared secret key.

HTH

Regards,

Re: How do i check accounting once its enabled?

cisco_himg — Mon, 21 Sep 2009 17:19:37 GMT

if i add the shared secret key on the ASA, where do i add the same key on the radius server?

Re: How do i check accounting once its enabled?

Jatin Katyal — Mon, 21 Sep 2009 17:30:24 GMT

Hi,

You can define the shared secret key while adding ASA as a AAA client on the ACS.

Check this for more info:

Adding AAA client

http://www.cisco.com/en/US/partner/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/NetCfg.html#wp342112

HTH

Regards,

Re: How do i check accounting once its enabled?

cisco_himg — Mon, 21 Sep 2009 17:49:55 GMT

thank you..

i have never downloaded the ACS before..which one do i download?

Re: How do i check accounting once its enabled?

Jatin Katyal — Mon, 21 Sep 2009 17:55:05 GMT

Hi,

You download Cisco Secure Access Control Server 90 Day Software Evaluation

http://www.cisco.com/kobayashi/sw-center/ciscosecure/cs-acs.shtml

HTH

Regards,

Re: How do i check accounting once its enabled?

Jagdeep Gambhir — Mon, 21 Sep 2009 17:59:40 GMT

Hi Himg,

Actually the location has changed. Here is the link to download ACS Eval version.

http://www.cisco.com/cgi-bin/tablebuild.pl/acs-win-eval

Regards,

~JG

Do rate helpful posts