FWSM 2.3(4) with AAA accounting

hany_ibrahim · ‎09-01-2010

i have FWSM version 2.3(4) , but i can't find a command to enable AAA accounting to

remote TACACS server , does 2.3(4) support AAA accounting or not , and what is the minimum version that support AAA accounting

Jia Liu · ‎09-01-2010

FWSM 2.3(4) does support aaa accounting. To define a TACACS server, you can use the 'aaa-server' command. Please see the command reference below for more details:

aaa accounting:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm23/command/reference/ab.html#wp1073208

aaa-server:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm23/command/reference/ab.html#wp1070086

hany_ibrahim · ‎09-01-2010

OK but what i want is enable accounting for commands entered during user session , like these commands on router:

aaa accounting commands 0 default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+

is it support accounting for user commands ?

Nate Austin · ‎09-07-2010

Hi Hany,

The FWSM does support command accounting however it wasn't added until 3.1(1):

http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/command/reference/a1.html#wp1611346

Thanks,

Nate