topic No data Found TACACS Command Accounting in Network Access Control

No data Found TACACS Command Accounting

croonos23 — Fri, 17 Jun 2022 03:15:21 GMT

Has anyone ever seen an issue with ISE 2.4.0 where when you go to the Operations > Reports > My reports > Device Administration > TACACS Command Accounting don't load any data ? Live Sessions has data and Reports show Tacacs Authentications. Any ideas or previous experiences? this service stopped working 2 days ago and I install patch 14 without changes

Re: No data Found TACACS Command Accounting

Arne Bier — Fri, 17 Jun 2022 06:16:01 GMT

TACACS Accounting is a separate type of traffic that has to be enabled on the NAD. It's optional - possibly not enabled?

example below should log all exec commands, as well as config command to the group TACGRP (containing your ISE TACACS servers)

aaa accounting exec default start-stop group TACGRP
aaa accounting commands 15 default start-stop group TACGRP
aaa accounting connection default start-stop group TACGRP

Re: No data Found TACACS Command Accounting

croonos23 — Fri, 17 Jun 2022 14:18:50 GMT

The configuration in the equipment is correct, this problem appeared a few days ago. I made some captures and I am receiving data but it does not show it, as in the image.

Re: No data Found TACACS Command Accounting

ahollifield — Fri, 17 Jun 2022 15:49:14 GMT

Are your monitoring nodes healthy? Do they show up and registered?

Also: https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/bulletin-c25-743964.html

Re: No data Found TACACS Command Accounting

croonos23 — Fri, 17 Jun 2022 20:04:22 GMT

The nodes are in good health, thanks for the Last Support Date information