cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

361
Views
5
Helpful
3
Replies
dtom
Beginner

TACACS - Commands do not show on Administraion Report

I have configured two switches for TACACS+ with the following commands:

aaa authentication login default group tacacs+ local

aaa authorization console

aaa authorization config-commands

aaa authorization exec default group tacacs+ local

aaa authorization commands 0 default group tacacs+ local

aaa authorization commands 1 default group tacacs+ local

aaa authorization commands 15 default group tacacs+ local

aaa accounting commands 15 default start-stop group tacacs+

I signed in as the same user and type the same commands, "sh run", on switch1 and switch2.

When I look at the TACACS Administration Report, the commands that I type on switch1 are on the report.  However, the same commands that I type on switch2 are not on the report.

Any thoughts as to what I missed?

1 ACCEPTED SOLUTION

Accepted Solutions

Hi

Could you please give me the version of the switch? Also, add the following command: and then test, see if that helped.

aaa accounting commands o default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

Regards

Minakshi (Do rate the helpful posts )

View solution in original post

3 REPLIES 3
Jatin Katyal
Cisco Employee

Get the following outputs from the switch 2:

show run | in aaa

Run the debugs on switch 2 and share the output here:

debug tacacs

debug aaa accounting

Jatin Katyal


- Do rate helpful posts -

~Jatin

Hi

Could you please give me the version of the switch? Also, add the following command: and then test, see if that helped.

aaa accounting commands o default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

Regards

Minakshi (Do rate the helpful posts )

View solution in original post

I added the two lines above:

aaa accounting commands 0 default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

Now all commands appear in the TACACS Administration Report

Thanks for the help

Content for Community-Ad