cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
398
Views
0
Helpful
2
Replies

Accounting Command for Configuration Changes

networking11
Level 1
Level 1

Hi All,

i want the logs of command 0r configuration changes made in ROuters or Switches to ACS 4.1,

like the following

Wed Jun 27 03:46:47 2001 172.16.25.15 fgeorge tty3 5622329430/4327528 stop

task_id=3 service=shell priv-lvl=1 cmd=show version <cr>

the above is found in the Command Accounting of the Link

http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfacct.html#wp1000976

2 Replies 2

Richard Burts
Hall of Fame
Hall of Fame

Anand

The information that you need about how to configure this is not so good in the link that you posted. But it is not difficult to configure. I use the following line in configuration of routers and get the accounting records in ACS for all privilege level commands including any configuration commands.

aaa accounting commands 15 default start-stop group tacacs+

You might want to change some details (like tacacs+) depending on how your routers are configured to talk to ACS.

HTH

Rick

HTH

Rick

Hi, rburts

Delay due to Wan installation

this command is already been configured in my lan & wan but i couldnt get that logs

, in my system configuration of NACS4.1 still,

can i have to add any Attributes further in Nacs.