Thanks for the reply, will have a down time & will let you know the result :-)

I am actually looking for a similar command which I used on the Cisco 2950/3750

aaa new-model

aaa authentication login default group tacacs+ enable local

aaa authentication enable default group tacacs+ enable

aaa authorization exec default group tacacs+ if-authenticated

aaa authorization commands 1 default group tacacs+ if-authenticated

aaa authorization commands 15 default group tacacs+ if-authenticated

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

with this commands I could able to track the command what all the user has used, logs with the user name which I configured on TACACS, the command which you have sent me I could able to login with the TACACS user name "aaa-server TACACS+ host " but it is not accounting all the details like login & logout time, command what the user has issued etc..

With the PIX/ASA it's a little goofy. The command is

aaa authentication enable console TACACS+ LOCAL

This command also sets the enable mode password to ACS. You need to make sure you have some sort of auth for enable mode in ACS. You will then have accounting with the username instead of priv_15.

HTH