Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

aaa accounting under acs

Hi

I use acs 4.1 under "Reports and Activity" -> "TACACS+ Accounting" I can see some start/stop reportings.

But under "Reports and Activity" -> "TACACS+ Administration" I can't see anything...

What do I have to configure at least???

Thanx

bb

6 REPLIES
Cisco Employee

Re: aaa accounting under acs

Hi,

I believe you are hitting a bug. The bug ID is CSCsg97429: TACACS+ Command Accounting does not work in ACS 4.1(1) Build 23.

The patch for bug

CSCsg97429 is ready and files are available on cisco.com.

Hope this helps,

Soumya

New Member

Re: aaa accounting under acs

Ensure you have the relevant config on you routers switches. It should look omething like this

aaa new-model

aaa authentication login default group tacacs+ enable

aaa authentication enable default group tacacs+ enable

aaa authorization exec default group tacacs+ none

aaa authorization commands 1 default group tacacs+ if-authenticated

aaa authorization commands 15 default group tacacs+ if-authenticated

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

Hope this helps.

Elliott

New Member

Re: aaa accounting under acs

Hi,

You guys rock !! This is my first time using this forum and you have solved a problem that had me tearing my hair out and questioning my sanity.

A BIG thank you to Somishra and Jghambir for your responses to this topic.

You are bang on with both the diagnosis and resolution.

Re: aaa accounting under acs

BB,

This is a known issue, you need to apply patch ACS 4.1.1.23.5 to fix the issue.

Patch for appliance is available on

http://www.cisco.com/cgi-bin/tablebuild.pl/acs-soleng-3des

Patch name : ACS SE 4.1.1.23.5 accumulative patch

Patch for acs windows is availble on

http://www.cisco.com/cgi-bin/tablebuild.pl/acs-win-3des')">http://www.cisco.com/cgi-bin/tablebuild.pl/acs-win-3des<

Patch Name : ACS 4.1.1.23.5 accumulative patch

That should fix the issue,

Regards,

Jagdeep

Note: If that answers your question, then please mark this thread as resolved, so that others can benefit from it.

Re: aaa accounting under acs

Also make sure that you apply patch on remote agent else communication between acs and RA will break.

Regards,

~JG

Silver

Re: aaa accounting under acs

If you encounter problems with the remote agent take a look at extraxi csvsync. This uses http to collect CSVs in bulk via CSAdmin and as such requires no agents or dedicated servers.

www.extraxi.com/csvsync.htm

155
Views
15
Helpful
6
Replies