topic Re: Accounting Command for Configuration Changes in Network Access Control

Accounting Command for Configuration Changes

networking11 — Sun, 10 Mar 2019 23:16:17 GMT

Hi All,

i want the logs of command 0r configuration changes made in ROuters or Switches to ACS 4.1,

like the following

Wed Jun 27 03:46:47 2001 172.16.25.15 fgeorge tty3 5622329430/4327528 stop

task_id=3 service=shell priv-lvl=1 cmd=show version <cr>

the above is found in the Command Accounting of the Link

http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfacct.html#wp1000976

Re: Accounting Command for Configuration Changes

Richard Burts — Fri, 09 Jan 2009 13:16:44 GMT

Anand

The information that you need about how to configure this is not so good in the link that you posted. But it is not difficult to configure. I use the following line in configuration of routers and get the accounting records in ACS for all privilege level commands including any configuration commands.

aaa accounting commands 15 default start-stop group tacacs+

You might want to change some details (like tacacs+) depending on how your routers are configured to talk to ACS.

HTH

Rick

Re: Accounting Command for Configuration Changes

networking11 — Sat, 10 Jan 2009 16:44:49 GMT

Hi, rburts

Delay due to Wan installation

this command is already been configured in my lan & wan but i couldnt get that logs

, in my system configuration of NACS4.1 still,

can i have to add any Attributes further in Nacs.