cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
6209
Views
15
Helpful
3
Replies

What is the main funtion of Accounting commands

chaitu_kranthi
Level 1
Level 1

Hi,

Can any one tell me that,

what is the main funtion of below commands in TACACS

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

aaa accounting system default start-stop group tacacs+

1 Accepted Solution

Accepted Solutions

If you have moved some commands to privilege level 7 locally on the device, then yes, you must have command,

aaa accounting commands 7 default start-stop group tacacs+

To account commands executed at that level.

You can do this,

sh run | i privilege

It should show you the commands moved to privilege level 7.

Regards,

Prem

Please rate if it helps!

View solution in original post

3 Replies 3

Premdeep Banga
Level 7
Level 7

aaa accounting exec default start-stop group tacacs+

!--- Log the start and stop of EXEC session to the device. When the user logged in and when the user logged out. Total time spent.

aaa accounting commands 1 default start-stop group tacacs+

!--- Account/Log all the commands executed by the user, that are at privilege level 1.

aaa accounting commands 15 default start-stop group tacacs+

!--- Account/Log all the commands executed by the user, that are at privilege level 15.

aaa accounting system default start-stop group tacacs+

!--- Send the log to the Tacacs server about the system events (reboot etc..)

More details,

http://www.cisco.com/en/US/docs/ios/security/command/reference/sec_a1.html#wp1038916

Regards,

Prem

Please rate if it helps!

Hi Prem,

thanks for you quick reply,

My doubt is almost cleared,But still some confusion if you don't mind, iam having some of the users in level 7.

does is require like "aaa accounting commands 7 default start-stop group tacacs+

If you have moved some commands to privilege level 7 locally on the device, then yes, you must have command,

aaa accounting commands 7 default start-stop group tacacs+

To account commands executed at that level.

You can do this,

sh run | i privilege

It should show you the commands moved to privilege level 7.

Regards,

Prem

Please rate if it helps!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: