cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
400
Views
0
Helpful
2
Replies

I want to enable accounting in my ACS 4.1

Hi everyone:

I have a issue, at this moment i have my ACS 4.1 running with authentication and authorisation. Also in a Switch i have the next lines:

***************************************

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

**************************************

The ACS 4.1 is enabled to use accounting.

in the part of part of "Reports and activity/TACACS+ Accounting" the next information:

-Date

-Time

-User-Name

-Group-Name

-Caller-Id

-Acct-Flags

-elapsed_time

-service

-NAS-IP-Address

-Access Device

-Network Device

-Start Time

But i can not see the commands that the users have used. I will appreciate if anyone can help me

Best regards.

2 Replies 2

darpotter
Level 5
Level 5

ACS will log commands in the T+ Administration logs. The T+ Accounting log will contain session start/stop only.

Command accounting logs are stored in tacacs

administration logs. Also there is a known bug on ver 4.1.1 in where we don't get the command accounting logs and to fix this issue we need to apply patch ACS 4.1.1.23.5.

Please see this link,

http://tinyurl.com/mja2eh

Regards,

~JG

Do rate helpful posts