ACS: passed IOS commands accounting

[kfischbach]

Hi all,

we are using command authorisation with IOS devices and ACS3.2.

Is it possible to get the passed commands in the tacacs log?

The only command accounts which i get is the failed attempts.

I can see that the router send accounting datas, for passed commands but ACS shows me nothing.

regards

Kalle

[sstudsdahl]

As long as you have the command or some variation of:

aaa accounting commands 15 default start-stop group tacacs+

in your IOS configuration, you should be able to see what is entered by looking at the TACACS+ Administration log under Reports and Activity.

Steve