aaa logged in user disappear after enable mode

k_vikrams · ‎05-14-2010

Logged In User not showing after going into enable mode on router,

a user shows up in the Logged-In User report on Cisco Secure ACS. With Accounting

the user session is removed from the Logged-In User report when i am going to enable mode.

acs 4.2 Solution Engine-1113

Jatin Katyal · ‎05-16-2010

Vikram,

Could you please provide me the output of "sh run | in aaa"

Also see if you have this command already there;

aaa accounting exec default start-stop group tacacs+


Regds,
JK

Do rate helpful posts-

~Jatin

k_vikrams · ‎05-16-2010

aaa new-model
aaa authentication login default group tacacs+ local
aaa authentication login consoleport none
aaa authentication enable default group tacacs+ enable
aaa authentication ppp default group tacacs+
aaa authorization config-commands
aaa authorization exec default if-authenticated group tacacs+
aaa authorization commands 0 default group tacacs+ local
aaa authorization commands 1 default group tacacs+ local
aaa authorization commands 15 default group tacacs+ local
aaa authorization network default group tacacs+ local
aaa accounting update newinfo
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting network default start-stop group tacacs+
aaa accounting connection default start-stop group tacacs+
aaa accounting system default start-stop group tacacs+

Jatin Katyal · ‎05-16-2010

Vikram,

All kind of accounting is there? How are you checking logged in user and for what kind of session (VPN)?

Regds

JK

~Jatin

k_vikrams · ‎05-17-2010

I have added only switches in ACS

see the attached image there are two users

one is vikram and one is test1

vikram is in enable mode

In acs i am able to see only one logged in user test1, because test1 is not in enable mode.