Radius Accounting on switches

[carl_townshend]

Hi All

Can anyone tell me if it is possible for Windows NPS radius server to log commands that have been done via aaa accounting on the switches?

I have added the commands to the switch 

aaa accounting exec default start-stop group NPS

aaa accounting commands 15 default start-stop group NPS

would this be enough for the Windows radius to log the commands?

cheers

[Reza Sharifi]

Hi,

Have a look at this document. It has the config for the NPS and also the switch.

https://www.freeccnaworkbook.com/blog/ccna-security/cisco-ios-radius-authentication-with-windows-server-2012-nps

HTH

[andrew.butterworth]

I don't think this works with Radius.  I have just enabled some debugging and tried adding accounting to a Radius server group on a Catalyst 3650 switch and get the following message on the console:

005519: Dec  6 16:38:42.746 GMT: %AAAA-4-SERVNOTACPLUS: The server-group "Radius-Servers" is not a tacacs+ server group. Please define "Radius-Servers" as a tacacs+ server group.
005520: Dec  6 16:38:42.747 GMT: %PARSE_RC-4-PRC_NON_COMPLIANCE: `aaa accounting commands 15 default start-stop group Radius-Servers '

And it doesn't accept the commands - or at least it doesn't add them to the configuration.

HTH
Andy