What is the main funtion of Accounting commands

Answered Question
Sep 14th, 2008
User Badges:

Hi,


Can any one tell me that,

what is the main funtion of below commands in TACACS



aaa accounting exec default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

aaa accounting system default start-stop group tacacs+

Correct Answer by Premdeep Banga about 8 years 9 months ago

If you have moved some commands to privilege level 7 locally on the device, then yes, you must have command,


aaa accounting commands 7 default start-stop group tacacs+


To account commands executed at that level.


You can do this,


sh run | i privilege


It should show you the commands moved to privilege level 7.


Regards,

Prem


Please rate if it helps!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Premdeep Banga Sun, 09/14/2008 - 14:18
User Badges:
  • Gold, 750 points or more

aaa accounting exec default start-stop group tacacs+

!--- Log the start and stop of EXEC session to the device. When the user logged in and when the user logged out. Total time spent.


aaa accounting commands 1 default start-stop group tacacs+

!--- Account/Log all the commands executed by the user, that are at privilege level 1.


aaa accounting commands 15 default start-stop group tacacs+

!--- Account/Log all the commands executed by the user, that are at privilege level 15.


aaa accounting system default start-stop group tacacs+

!--- Send the log to the Tacacs server about the system events (reboot etc..)


More details,

http://www.cisco.com/en/US/docs/ios/security/command/reference/sec_a1.html#wp1038916


Regards,

Prem


Please rate if it helps!

chaitu_kranthi Sun, 09/14/2008 - 21:53
User Badges:

Hi Prem,


thanks for you quick reply,


My doubt is almost cleared,But still some confusion if you don't mind, iam having some of the users in level 7.


does is require like "aaa accounting commands 7 default start-stop group tacacs+


Correct Answer
Premdeep Banga Mon, 09/15/2008 - 03:54
User Badges:
  • Gold, 750 points or more

If you have moved some commands to privilege level 7 locally on the device, then yes, you must have command,


aaa accounting commands 7 default start-stop group tacacs+


To account commands executed at that level.


You can do this,


sh run | i privilege


It should show you the commands moved to privilege level 7.


Regards,

Prem


Please rate if it helps!

Actions

This Discussion