ACS accounting

wasiimcisco · ‎04-21-2008

I have configure the ACS with tacacs

but I am not able to see complete logging of all commands that I am using during the session. I configure the following things on router

aaa new-model

aaa authentication login default group radius local

aaa authorization exec authorization group radius

aaa accounting commands 15 accounting start-stop group radius

aaa accounting exec default start-stop group radius

aaa accounting network default start-stop group radius

radius-server host 172.28.31.132

radius-server key waridtel0321

ip radius source-interface gig 0/1

Please tell me how i can see which activities user has performed during the session. detail of command.

Can i use tacacs for authentication and radius for accounting. I tried it but it didnt work for me.

Please guide I will be very greatful to you.

in Tacacs accounting CSV file, it shows me only login time, user id and service shell, i want to see detail of command that user has used during the session

Richard Burts · ‎04-22-2008

wasim

When you look in the Accounting CSV you will see information about session start and stop etc. That is not where you will see report of commands issued. Look in the Administration CSV and you should see information about commands issued.

HTH

Rick

HTH

Rick

wasiimcisco · ‎04-22-2008

My dear friend, I am able to see commands detail only when I configure devices for tacacs, but when i configure them for radius, i am only able to see start and stop activity as mentioned in the sheet, but for radius there is no tab like we have for TACACS ADMINSITRATION.

In ACS Report and activity i can only see RADIUS accounting tab the Radius administration. Please tell me how can i see the same command detail as i can see in tacacs, i have updgraded the patch too. but still not able to get the detail in radius.

though i have heard that radius is more powerful and effecient than tacacs in case of accounting.

Jagdeep Gambhir · ‎04-22-2008

Dear Wasim,

Command accounting is only possible via Tacacs and not radius.

Regards,

~JG

Do rate helpful posts

wasiimcisco · ‎04-23-2008

Thanks for the reply, now I want to configure windows domain controller to work with ACS, is that possible if yes what will be the configuration steps.

I want to use windows users to use for authentication purposes, ACS use windows username and password use for authentication.

Jagdeep Gambhir · ‎04-23-2008

Yes, that is possible.

Check out this link,

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/user/UsrDb.html#wp353636