accounting(commands)

ohassairi · ‎02-02-2008

we are trying to monitor what our network engineers enter as commands when configuring cisco devices. so we think the best solution is to use accounting feature.

when configuring aaa (accounting):

router(config)#aaa accounting commands ?

<0-15> Enable level

we tried with privilege 15, but we only get logged commands entered in # mode: commands in config mode and in interface mode are not logged to taccacs server!

is there a way to resolve this?

Edison Ortiz · ‎02-03-2008

> is there a way to resolve this?

You need to enable accounting for exec as well.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124cr/hsec_r/sec_a1h.htm#wp1155873

HTH,

__

Edison.

royalblues · ‎02-03-2008

Configure the following commands to get the accounting details for all the privilege levels

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

The default will apply the config to all lines. If you have a method list defined use it in place of the default

HTH

Narayan