aaa accounting under acs

Unanswered Question
Jul 20th, 2007
User Badges:


I use acs 4.1 under "Reports and Activity" -> "TACACS+ Accounting" I can see some start/stop reportings.

But under "Reports and Activity" -> "TACACS+ Administration" I can't see anything...

What do I have to configure at least???



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (3 ratings)
somishra Fri, 07/20/2007 - 02:10
User Badges:
  • Cisco Employee,


I believe you are hitting a bug. The bug ID is CSCsg97429: TACACS+ Command Accounting does not work in ACS 4.1(1) Build 23.

The patch for bug

CSCsg97429 is ready and files are available on

Hope this helps,


elliott.fougman Fri, 07/20/2007 - 06:48
User Badges:

Ensure you have the relevant config on you routers switches. It should look omething like this

aaa new-model

aaa authentication login default group tacacs+ enable

aaa authentication enable default group tacacs+ enable

aaa authorization exec default group tacacs+ none

aaa authorization commands 1 default group tacacs+ if-authenticated

aaa authorization commands 15 default group tacacs+ if-authenticated

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

Hope this helps.


j-mccarthy Tue, 10/02/2007 - 22:28
User Badges:


You guys rock !! This is my first time using this forum and you have solved a problem that had me tearing my hair out and questioning my sanity.

A BIG thank you to Somishra and Jghambir for your responses to this topic.

You are bang on with both the diagnosis and resolution.

Jagdeep Gambhir Fri, 07/20/2007 - 07:32
User Badges:
  • Red, 2250 points or more


This is a known issue, you need to apply patch ACS to fix the issue.

Patch for appliance is available on

Patch name : ACS SE accumulative patch

Patch for acs windows is availble on')">

Patch Name : ACS accumulative patch

That should fix the issue,



Note: If that answers your question, then please mark this thread as resolved, so that others can benefit from it.

Jagdeep Gambhir Fri, 07/20/2007 - 07:34
User Badges:
  • Red, 2250 points or more

Also make sure that you apply patch on remote agent else communication between acs and RA will break.



darpotter Sun, 07/22/2007 - 22:57
User Badges:
  • Silver, 250 points or more

If you encounter problems with the remote agent take a look at extraxi csvsync. This uses http to collect CSVs in bulk via CSAdmin and as such requires no agents or dedicated servers.


This Discussion