topic Re: Tracking the executed commands in Network Access Control https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788863#M420009 <HTML><HEAD></HEAD><BODY><P>Check this out.</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a0080454f73.html" target="_blank">http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a0080454f73.html</A></P><P></P><P>HTH and please rate.</P></BODY></HTML> Fri, 13 Jul 2007 21:48:42 GMT Collin Clark 2007-07-13T21:48:42Z Tracking the executed commands https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788859#M420003 <P>We are using Microsoft IAS Radius server for authentication to a large number of Cisco routers in our organization. Is it possible to log the commands that are entered on routers (Whether console or telnet session) for audit purposes? If so, is there a document on how to do implement it?</P><P></P> Sun, 10 Mar 2019 22:16:22 GMT https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788859#M420003 kendo.igor 2019-03-10T22:16:22Z Re: Tracking the executed commands https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788860#M420005 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>That is very much possible but I am not sure if IAS logging supports it. Here are the commands we need to configure on IOS devcie.</P><P></P><P>aaa accounting exec default start-stop group tacacs+</P><P>aaa accounting commands 0 default start-stop group tacacs+/Radius</P><P>aaa accounting commands 1 default start-stop group tacacs+/Radius</P><P>aaa accounting commands 15 default start-stop group tacacs+/Radius</P><P></P><P>HTH</P><P>Parminder</P></BODY></HTML> Fri, 13 Jul 2007 16:28:49 GMT https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788860#M420005 parmsing 2007-07-13T16:28:49Z Re: Tracking the executed commands https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788861#M420007 <HTML><HEAD></HEAD><BODY><P>Unfortunately its not possible using IAS, as it only supports Radius protocol.</P><P></P><P>And you are looking for is covered under TACACS+ protocol (Cisco ACS)</P><P></P><P>Regards,</P><P>Prem</P></BODY></HTML> Fri, 13 Jul 2007 16:31:46 GMT https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788861#M420007 Premdeep Banga 2007-07-13T16:31:46Z Re: Tracking the executed commands https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788862#M420008 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>My apologies for the incorrect information, I recreated this issue and Prem is correct, we cannot configure radius accounting for the commands. Tacacs is the only option available for the command accounting.</P><P></P><P>Thanks</P><P>Parminder</P></BODY></HTML> Fri, 13 Jul 2007 18:28:58 GMT https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788862#M420008 parmsing 2007-07-13T18:28:58Z Re: Tracking the executed commands https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788863#M420009 <HTML><HEAD></HEAD><BODY><P>Check this out.</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a0080454f73.html" target="_blank">http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a0080454f73.html</A></P><P></P><P>HTH and please rate.</P></BODY></HTML> Fri, 13 Jul 2007 21:48:42 GMT https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788863#M420009 Collin Clark 2007-07-13T21:48:42Z Re: Tracking the executed commands https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788864#M420010 <HTML><HEAD></HEAD><BODY><P>Collin</P><P></P><P>This is a very neat feature that I was not aware of. I believe it deserves the 5 rating that I gave it.</P><P></P><P>HTH</P><P></P><P>Rick</P></BODY></HTML> Sat, 14 Jul 2007 16:31:22 GMT https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788864#M420010 Richard Burts 2007-07-14T16:31:22Z Re: Tracking the executed commands https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788865#M420011 <HTML><HEAD></HEAD><BODY><P>Indeed a very good feature.</P><P></P><P>rated <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P></P><P>Narayan</P></BODY></HTML> Sat, 14 Jul 2007 18:10:54 GMT https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788865#M420011 royalblues 2007-07-14T18:10:54Z Re: Tracking the executed commands https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788866#M420012 <HTML><HEAD></HEAD><BODY><P>The link no longer seems to be valid. What is the <STRONG>neat/good</STRONG> feature that you guys are talking about ?? <SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/emoticons/happy.gif"></SPAN></P></BODY></HTML> Wed, 10 Jul 2013 23:13:56 GMT https://community.cisco.com/t5/network-access-control/tracking-the-executed-commands/m-p/788866#M420012 nspasov 2013-07-10T23:13:56Z