Accounting Command for Configuration Changes

Unanswered Question
Jan 9th, 2009
User Badges:

Hi All,


i want the logs of command 0r configuration changes made in ROuters or Switches to ACS 4.1,


like the following

Wed Jun 27 03:46:47 2001 172.16.25.15 fgeorge tty3 5622329430/4327528 stop

task_id=3 service=shell priv-lvl=1 cmd=show version <cr>


the above is found in the Command Accounting of the Link


http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfacct.html#wp1000976


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Richard Burts Fri, 01/09/2009 - 05:16
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Anand


The information that you need about how to configure this is not so good in the link that you posted. But it is not difficult to configure. I use the following line in configuration of routers and get the accounting records in ACS for all privilege level commands including any configuration commands.

aaa accounting commands 15 default start-stop group tacacs+


You might want to change some details (like tacacs+) depending on how your routers are configured to talk to ACS.


HTH


Rick

networking11 Sat, 01/10/2009 - 08:44
User Badges:

Hi, rburts


Delay due to Wan installation


this command is already been configured in my lan & wan but i couldnt get that logs

, in my system configuration of NACS4.1 still,

can i have to add any Attributes further in Nacs.

Actions

This Discussion