cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
928
Views
0
Helpful
4
Replies

aaa logged in user disappear after enable mode

k_vikrams
Level 1
Level 1

Logged In User not showing after going into enable mode on router,

a user shows up in the Logged-In User report on Cisco Secure ACS. With Accounting

the user session is removed from the Logged-In User report when i am going to enable mode.


acs  4.2 Solution Engine-1113

4 Replies 4

Jatin Katyal
Cisco Employee
Cisco Employee

Vikram,


Could you please provide me the output of "sh run | in aaa"


Also see if you have this command already there;

aaa accounting exec default start-stop group tacacs+


Regds,
JK

Do rate helpful posts
-

~Jatin

aaa new-model
aaa authentication login default group tacacs+ local
aaa authentication login consoleport none
aaa authentication enable default group tacacs+ enable
aaa authentication ppp default group tacacs+
aaa authorization config-commands
aaa authorization exec default if-authenticated group tacacs+
aaa authorization commands 0 default group tacacs+ local
aaa authorization commands 1 default group tacacs+ local
aaa authorization commands 15 default group tacacs+ local
aaa authorization network default group tacacs+ local
aaa accounting update newinfo
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting network default start-stop group tacacs+
aaa accounting connection default start-stop group tacacs+
aaa accounting system default start-stop group tacacs+

Vikram,


All kind of accounting is there? How are you checking logged in user and for what kind of session (VPN)?


Regds

JK


~Jatin

I have added only switches in ACS

see the attached image there are two users

one is vikram and one is test1

vikram is in enable mode

In acs i am able to see only one logged in user test1, because test1 is not in enable mode.

Review Cisco Networking for a $25 gift card