09-14-2008 10:55 AM - edited 03-10-2019 04:05 PM
Hi,
Can any one tell me that,
what is the main funtion of below commands in TACACS
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
Solved! Go to Solution.
09-15-2008 03:54 AM
If you have moved some commands to privilege level 7 locally on the device, then yes, you must have command,
aaa accounting commands 7 default start-stop group tacacs+
To account commands executed at that level.
You can do this,
sh run | i privilege
It should show you the commands moved to privilege level 7.
Regards,
Prem
Please rate if it helps!
09-14-2008 02:18 PM
aaa accounting exec default start-stop group tacacs+
!--- Log the start and stop of EXEC session to the device. When the user logged in and when the user logged out. Total time spent.
aaa accounting commands 1 default start-stop group tacacs+
!--- Account/Log all the commands executed by the user, that are at privilege level 1.
aaa accounting commands 15 default start-stop group tacacs+
!--- Account/Log all the commands executed by the user, that are at privilege level 15.
aaa accounting system default start-stop group tacacs+
!--- Send the log to the Tacacs server about the system events (reboot etc..)
More details,
http://www.cisco.com/en/US/docs/ios/security/command/reference/sec_a1.html#wp1038916
Regards,
Prem
Please rate if it helps!
09-14-2008 09:53 PM
Hi Prem,
thanks for you quick reply,
My doubt is almost cleared,But still some confusion if you don't mind, iam having some of the users in level 7.
does is require like "aaa accounting commands 7 default start-stop group tacacs+
09-15-2008 03:54 AM
If you have moved some commands to privilege level 7 locally on the device, then yes, you must have command,
aaa accounting commands 7 default start-stop group tacacs+
To account commands executed at that level.
You can do this,
sh run | i privilege
It should show you the commands moved to privilege level 7.
Regards,
Prem
Please rate if it helps!
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: