cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2317
Views
5
Helpful
1
Replies

AAA Accounting report not showing commands issued in ISE.

Hung_lin
Level 1
Level 1

Can’t display AAA Accounting report not showing commands issued in ISE.

 
The configuration file is as follows

aaa authentication login default line none

aaa authentication login use-tacacs groupest line none

aaa accounting exec use-tacacs start-stop groupest

aaa accounting commands 15 use-tacacs start-stop group test

 

But after making the modification as below

aaa authentication login default line none
aaa authentication login use-tacacs group jihsun line none
aaa authorization config-commands
aaa authorization commands 1 default group tacacs+
aaa authorization commands 15 default group tacacs+
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 1 use-tacacs start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting commands 15 use-tacacs start-stop group tacacs+

 

The result can be displayed normally.

For example, the original show cdp neighbor can be displayed frequently after modification.

What happen??

 

1 Accepted Solution

Accepted Solutions

Colby LeMaire
VIP Alumni
VIP Alumni

In your first configuration snippet, was that accounting method list applied to your vty lines?  My assumption is no.  Which is why your second snippet works since you are configuring both a named method list and the "default" list.  "default" applies to all lines in the device where there is nothing locally configured on that specific line.  So if you don't have the method list applied to your vty lines, then default applies.

View solution in original post

1 Reply 1

Colby LeMaire
VIP Alumni
VIP Alumni

In your first configuration snippet, was that accounting method list applied to your vty lines?  My assumption is no.  Which is why your second snippet works since you are configuring both a named method list and the "default" list.  "default" applies to all lines in the device where there is nothing locally configured on that specific line.  So if you don't have the method list applied to your vty lines, then default applies.