topic Shell Command logging in Network Access Control

Shell Command logging

mishrav — Sun, 10 Mar 2019 20:50:19 GMT

Hello Dear

I am using ACS 3.1 for windows server. i wounder how i can log / record all commands executed by engineers on cisco devices during their telnet sessions. I can sucessfully permit/deny for particular command.

Thanks

Re: Shell Command logging

Richard Burts — Tue, 05 Oct 2004 10:56:19 GMT

To do log or record commands issued by engineers on Cisco devices you need to configure aaa accounting. At a customer site we want to record commands entered in privilege mode and configure this:

aaa accounting commands 15 default start-stop group tacacs+

and it works very well for us.

If you want to also record commands from user mode you would add another line:

aaa accounting commands 1 default start-stop group tacacs+

This sends accounting records to your ACS server.

HTH

Rick

Re: Shell Command logging

mishrav — Wed, 06 Oct 2004 07:11:41 GMT

Thanks Rick

it works