Shell Command logging

[mishrav]

Hello Dear

I am using ACS 3.1 for windows server. i wounder how i can log / record all commands executed by engineers on cisco devices during their telnet sessions. I can sucessfully permit/deny for particular command.

Thanks

[Richard Burts]

To do log or record commands issued by engineers on Cisco devices you need to configure aaa accounting. At a customer site we want to record commands entered in privilege mode and configure this:

aaa accounting commands 15 default start-stop group tacacs+

and it works very well for us.

If you want to also record commands from user mode you would add another line:

aaa accounting commands 1 default start-stop group tacacs+

This sends accounting records to your ACS server.

HTH

Rick

[mishrav]

Thanks Rick

it works