cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
890
Views
0
Helpful
1
Replies

How to check command run by user onn device using ACS (4.1)

csco11522833
Level 1
Level 1

Hi I am running ACS 4.1. I want to check command run by user on the device. How can I check. AAA config of the device is as follows:-

 

aaa-server ADMIN protocol tacacs+
aaa-server ADMIN (OUTSIDE) host x.x.x.x
aaa-server ADMIN (OUTSIDE) host x.x.x.x
aaa authentication ssh console ADMIN LOCAL
aaa authentication enable console ADMIN LOCAL
aaa authentication http console ADMIN LOCAL
aaa accounting command ADMIN
aaa accounting ssh console ADMIN
aaa accounting enable console ADMIN

 

 

 

 

 

1 Accepted Solution

Accepted Solutions

Jatin Katyal
Cisco Employee
Cisco Employee

You have to configure command authorization on the ASA too.

aaa authorization command ADMIN LOCAL

NOTE: Before you enter the command, ensure your ASA can talk to TACACS server via OUTSIDE interface.

https://www.youtube.com/watch?v=JzBmIuTGg-M

 

~Jatin

View solution in original post

1 Reply 1

Jatin Katyal
Cisco Employee
Cisco Employee

You have to configure command authorization on the ASA too.

aaa authorization command ADMIN LOCAL

NOTE: Before you enter the command, ensure your ASA can talk to TACACS server via OUTSIDE interface.

https://www.youtube.com/watch?v=JzBmIuTGg-M

 

~Jatin
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: