01-09-2009 02:58 AM - edited 03-10-2019 04:16 PM
Hi All,
i want the logs of command 0r configuration changes made in ROuters or Switches to ACS 4.1,
like the following
Wed Jun 27 03:46:47 2001 172.16.25.15 fgeorge tty3 5622329430/4327528 stop
task_id=3 service=shell priv-lvl=1 cmd=show version <cr>
the above is found in the Command Accounting of the Link
http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfacct.html#wp1000976
01-09-2009 05:16 AM
Anand
The information that you need about how to configure this is not so good in the link that you posted. But it is not difficult to configure. I use the following line in configuration of routers and get the accounting records in ACS for all privilege level commands including any configuration commands.
aaa accounting commands 15 default start-stop group tacacs+
You might want to change some details (like tacacs+) depending on how your routers are configured to talk to ACS.
HTH
Rick
01-10-2009 08:44 AM
Hi, rburts
Delay due to Wan installation
this command is already been configured in my lan & wan but i couldnt get that logs
, in my system configuration of NACS4.1 still,
can i have to add any Attributes further in Nacs.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide