AAA Accounting on Routers

Answered Question
Sep 23rd, 2009

Hey guys,

I am looking for some help in setting up my router to where it reports to my CSACS all commands executed by users. For example, I login as the user bbaggins and I make changes to an ACL configuration, is there a way for the commands I typed in to be logged by the ACS?

Thanks for your help.

I have this problem too.
0 votes
Correct Answer by Jagdeep Gambhir about 7 years 2 months ago

You need to set up tacacs for that. Here are the commands.

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

Command accounting logs are stored in tacacs administration logs. Also there is a known issue on ver 4.1.1 and we need to apply patch ACS 4.1.1.23.5 to fix the issue.

Patch for appliance is available on

http://www.cisco.com/cgi-bin/tablebuild.pl/acs-soleng-3des

Patch name : ACS SE 4.1.1.23.5 accumulative patch

Patch for acs windows is available on

http://www.cisco.com/cgi-bin/tablebuild.pl/acs-win-3des

Patch Name : ACS 4.1.1.23.5 accumulative patch

Regards,

~JG

Do rate helpful posts

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Jagdeep Gambhir Wed, 09/23/2009 - 07:42

You need to set up tacacs for that. Here are the commands.

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

Command accounting logs are stored in tacacs administration logs. Also there is a known issue on ver 4.1.1 and we need to apply patch ACS 4.1.1.23.5 to fix the issue.

Patch for appliance is available on

http://www.cisco.com/cgi-bin/tablebuild.pl/acs-soleng-3des

Patch name : ACS SE 4.1.1.23.5 accumulative patch

Patch for acs windows is available on

http://www.cisco.com/cgi-bin/tablebuild.pl/acs-win-3des

Patch Name : ACS 4.1.1.23.5 accumulative patch

Regards,

~JG

Do rate helpful posts

Joshua Engels Wed, 09/23/2009 - 07:46

You are the man. I had it setup and didn't realize it was under Administration. Thanks so much for your help.

Joshua Engels Wed, 09/23/2009 - 07:49

One last question.....

do I need "aaa accounting commands 1 default start-stop group tacacs+" and "aaa accounting commands 15 default start-stop group tacacs"? What for?

Jagdeep Gambhir Wed, 09/23/2009 - 08:14

aaa accounting commands 1 default start-stop group tacacs+

That is to log accounting for Priv 1 command

aaa accounting commands 15 default start-stop group tacacs"

That is to log accounting for Priv 15 command

Regards,

~JG

Do rate helpful posts

Actions

This Discussion