AAA accounting

[wsitu]

I just setup ACS 3.1. One of my goal is to be able to view accounting info. The main one is what my users are typing on routers/switches. The Accounting Log does not show this. Where do I find this info?

Thanks

[edadios]

You can do tacacs command authorization :

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs31/acsuser/o.htm#xtocid22

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fsecur_r/faaacr/srfauth.htm#xtocid1

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fsecur_r/faaacr/srfacct.htm#xtocid1

Regards,

[wsitu]

Thanks for the urls. I am still looking for an answer to where I would find detail level accounting informations, specifically "commands user executed" during a login session. This information is missing from "TACACS Accounting Report".

[shamilton-wilkes]

It does work. You are looking in the adminstrative accounting log aren't you ?

On the device my config is:

aaa new-model

aaa authentication login default group tacacs+ local

aaa authentication enable default group tacacs+ enable

aaa authorization exec default group tacacs+

aaa authorization commands 1 default group tacacs+

aaa authorization commands 15 default group tacacs+

aaa accounting exec default start-stop group tacacs+

aaa accounting command 1 default start-stop group tacacs+

aaa accounting command 15 default start-stop group tacacs+

Simon

[wsitu]

Thanks Simon.

Do you know how I can create a group of users who has full access only to their departmental routers/switches and nothing else?

wayne