Maybe i can go about this another way...

What about this....

I basically want to know when a user logs off and back on WEBVPN. I really dont want to associate to a Radius nor a TACACS. I want to keep all the users to authenticate locally on the ASA. What all do i need to do?

THanks a bunch!

radius accounting files contain the following info:

User session's start and stop time frame

AAA client message with username

callier line identification info

session duration

In order to configure this for webvpn user, you need to add this command under webvpn default tunnel group

accounting-server-group

In oder to check share sceret key for any aaa client. Go to network configuration > NDG (if any) > aaa client edit > look for shared secret key.

HTH

Regards,

JK

if i add the shared secret key on the ASA, where do i add the same key on the radius server?

Hi,

You can define the shared secret key while adding ASA as a AAA client on the ACS.

Check this for more info:

Adding AAA client

http://www.cisco.com/en/US/partner/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/NetCfg.html#wp342112

HTH

Regards,

JK

thank you..

i have never downloaded the ACS before..which one do i download?

Hi,

You download Cisco Secure Access Control Server 90 Day Software Evaluation

http://www.cisco.com/kobayashi/sw-center/ciscosecure/cs-acs.shtml

HTH

Regards,

JK

Hi Himg,

Actually the location has changed. Here is the link to download ACS Eval version.

http://www.cisco.com/cgi-bin/tablebuild.pl/acs-win-eval

Regards,

~JG

Do rate helpful posts