topic AAA accounting in Network Access Control

AAA accounting

wsitu — Sun, 10 Mar 2019 14:05:18 GMT

I just setup ACS 3.1. One of my goal is to be able to view accounting info. The main one is what my users are typing on routers/switches. The Accounting Log does not show this. Where do I find this info?

Thanks

Re: AAA accounting

edadios — Sat, 21 Dec 2002 06:25:50 GMT

You can do tacacs command authorization :

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs31/acsuser/o.htm#xtocid22

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fsecur_r/faaacr/srfauth.htm#xtocid1

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fsecur_r/faaacr/srfacct.htm#xtocid1

Regards,

Re: AAA accounting

wsitu — Mon, 23 Dec 2002 20:17:57 GMT

Thanks for the urls. I am still looking for an answer to where I would find detail level accounting informations, specifically "commands user executed" during a login session. This information is missing from "TACACS Accounting Report".

Re: AAA accounting

shamilton-wilkes — Mon, 30 Dec 2002 20:36:03 GMT

It does work. You are looking in the adminstrative accounting log aren't you ?

On the device my config is:

aaa new-model

aaa authentication login default group tacacs+ local

aaa authentication enable default group tacacs+ enable

aaa authorization exec default group tacacs+

aaa authorization commands 1 default group tacacs+

aaa authorization commands 15 default group tacacs+

aaa accounting exec default start-stop group tacacs+

aaa accounting command 1 default start-stop group tacacs+

aaa accounting command 15 default start-stop group tacacs+

Simon

Re: AAA accounting

wsitu — Mon, 30 Dec 2002 21:29:16 GMT

Thanks Simon.

Do you know how I can create a group of users who has full access only to their departmental routers/switches and nothing else?

wayne