What is the main funtion of Accounting commands

Answered Question
Sep 14th, 2008

Hi,

Can any one tell me that,

what is the main funtion of below commands in TACACS

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

aaa accounting system default start-stop group tacacs+

I have this problem too.
0 votes
Correct Answer by Premdeep Banga about 8 years 4 months ago

If you have moved some commands to privilege level 7 locally on the device, then yes, you must have command,

aaa accounting commands 7 default start-stop group tacacs+

To account commands executed at that level.

You can do this,

sh run | i privilege

It should show you the commands moved to privilege level 7.

Regards,

Prem

Please rate if it helps!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Premdeep Banga Sun, 09/14/2008 - 14:18

aaa accounting exec default start-stop group tacacs+

!--- Log the start and stop of EXEC session to the device. When the user logged in and when the user logged out. Total time spent.

aaa accounting commands 1 default start-stop group tacacs+

!--- Account/Log all the commands executed by the user, that are at privilege level 1.

aaa accounting commands 15 default start-stop group tacacs+

!--- Account/Log all the commands executed by the user, that are at privilege level 15.

aaa accounting system default start-stop group tacacs+

!--- Send the log to the Tacacs server about the system events (reboot etc..)

More details,

http://www.cisco.com/en/US/docs/ios/security/command/reference/sec_a1.html#wp1038916

Regards,

Prem

Please rate if it helps!

chaitu_kranthi Sun, 09/14/2008 - 21:53

Hi Prem,

thanks for you quick reply,

My doubt is almost cleared,But still some confusion if you don't mind, iam having some of the users in level 7.

does is require like "aaa accounting commands 7 default start-stop group tacacs+

Correct Answer
Premdeep Banga Mon, 09/15/2008 - 03:54

If you have moved some commands to privilege level 7 locally on the device, then yes, you must have command,

aaa accounting commands 7 default start-stop group tacacs+

To account commands executed at that level.

You can do this,

sh run | i privilege

It should show you the commands moved to privilege level 7.

Regards,

Prem

Please rate if it helps!

Actions

This Discussion