Accounting Command for Configuration Changes

[networking11]

Hi All,

i want the logs of command 0r configuration changes made in ROuters or Switches to ACS 4.1,

like the following

Wed Jun 27 03:46:47 2001 172.16.25.15 fgeorge tty3 5622329430/4327528 stop

task_id=3 service=shell priv-lvl=1 cmd=show version <cr>

the above is found in the Command Accounting of the Link

http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfacct.html#wp1000976

[Richard Burts]

Anand

The information that you need about how to configure this is not so good in the link that you posted. But it is not difficult to configure. I use the following line in configuration of routers and get the accounting records in ACS for all privilege level commands including any configuration commands.

aaa accounting commands 15 default start-stop group tacacs+

You might want to change some details (like tacacs+) depending on how your routers are configured to talk to ACS.

HTH

Rick

[networking11]

Hi, rburts

Delay due to Wan installation

this command is already been configured in my lan & wan but i couldnt get that logs

, in my system configuration of NACS4.1 still,

can i have to add any Attributes further in Nacs.