topic Logging all IOS commands to AAA in Network Access Control

Logging all IOS commands to AAA

adancso — Fri, 21 Feb 2020 18:04:43 GMT

Hi everyone,

Is it possible to log every command issued on routers/switches to an AAA server such as CiscoSecure ACS?

If yes, how?

Cheers,

Attila

jeff_caprock — Mon, 28 Oct 2002 20:41:53 GMT

Sure, just use the "tacacs administration" command along with the apporpriate accounting commands.

-Jeff

4brown — Mon, 28 Oct 2002 21:00:34 GMT

There is an excellent example of using IOS command authorization and accounting with CiscoSecure ACS for Unix here:

and

Note this is command accounting for privilege level 15 commands. If you want to account for others, just specify the privilege level.

Hope this helps....