cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
649
Views
0
Helpful
3
Replies

PIX Accounting

rebwar123
Level 1
Level 1

Hi,

I have configured a PIX with the following commands:

aaa-server TACACS+ protocol tacacs+

aaa-server TACACS+ (sopdc) host 10.XX.XX.XX

timeout 20

key XXXXXXXX

aaa-server TACACS+ (sopdc) host 10.XX.XX.XX

timeout 20

key XXXXXXXXX

aaa authentication serial console LOCAL

aaa authentication telnet console TACACS+ LOCAL

aaa authentication enable console TACACS+ LOCAL

aaa accounting command TACACS+

aaa accounting enable console TACACS+

aaa accounting telnet console TACACS+

Authentication works fine but accounting doesnt work where i can see limited logs in the ACS server as attached.

Any ideas?

3 Replies 3

Jagdeep Gambhir
Level 10
Level 10

Hi ,

Did you check tacacs administration logs ? What is the code on Pix ?

Regards,

There is nothing in tacacs administration logs.

The code on the PIX 7.0 for accounting is:

aaa accounting enable console TACACS+

aaa accounting telnet console TACACS+

aaa accounting command TACACS+

Seems to be a bug. This issue has been documented in the PIX 7.x code:

http://www.cisco.com/cgi-bin/Support/Bugtool/onebug.pl?bugid=CSCsc85210

The fix has been integrated into PIX 7.2.1 and later.