cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

411
Views
0
Helpful
5
Replies
Highlighted
Beginner

How to see Accounting

                   Hi

I have installed ACS appliance version 5.1.0.44 in my office.I tried to check TACACS accounting for what command the engineers used but I couldnt find the outputs.Please advse how to get it.

This is my configurtion.

aaa new-model

aaa authentication password-prompt xxxxx

aaa authentication username-prompt yyyyy

aaa authentication login telnet group tacacs+ local

aaa authentication login console group tacacs+ local

aaa authentication enable default group tacacs+ enable

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

aaa accounting network default start-stop group tacacs+

aaa session-id common

Thanks and Regards,

Shahul Hameed

Everyone's tags (3)
5 REPLIES 5
Cisco Employee

How to see Accounting

Hello Shahul-

Can you post all of your AAA configs for this router/switch? Also, did you add this network device as "AAA client" in ACS?


Thank you for rating!

Beginner

How to see Accounting

Hi Neno

I have added the switch as client in AAA server.

Please check all my AAA config in Switch.

aaa new-model

aaa authentication password-prompt xxxxx:

aaa authentication username-prompt yyyyy:

aaa authentication login telnet group tacacs+ local

aaa authentication login console group tacacs+ local

aaa authentication login ssh group tacacs+ local

aaa authentication enable default group tacacs+ enable

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

aaa accounting network default start-stop group tacacs+

aaa session-id common

ip tacacs source-interface Loopback0

tacacs-server host x.x.x.x key sdsdsdsd

tacacs-server host x.x.x.x key dsdsdsds

tacacs-server directed-request

aaa authentication dot1x default group radius

aaa authorization network default group radius

aaa accounting exec default start-stop group radius

aaa accounting dot1x default start-stop group radius

dot1x system-auth-control

dot1x critical recovery delay 2000

dot1x critical eapol

ip radius source-interface Loopback0

radius-server dead-criteria time 15 tries 15

radius-server host x.x.x.x auth-port 1645 acct-port 1646

radius-server host x.x.x.x auth-port 1645 acct-port 1646

radius-server source-ports 1645-1646

radius-server deadtime 1

radius-server directed-request

radius-server key dddsdsdds

Cisco Employee

How to see Accounting

I am sorry Shahul I fell behind here as I got really busy. I compared your conifgs with what I have used in the past and they look correct. So are you saying that authentication is working through ACS but when you run accounting reports no data comes up?

Thanks for rating!

Beginner

How to see Accounting

Hi Neno

Yes I need to download accounting reports.

Thanks and Regards,

Shahul Hameed.

Cisco Employee

How to see Accounting

OK so what happens when you run a report under

Monitoring & Reports >Reports >Catalog >AAA Protocol


Do you see any data there after you have run a few commands on the device configured for AAA accounting ?