Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

username in accounting report

Hello, i wonder how could i get accounting of who get in asa n what have he done to asa.

I already input :

aaa accounting command <group>

aaa accounting enable console <group>

aaa accounting telnet console <group>

And i can see who login in tacac+ accounting.

But i can't see who have input command in tacac+ administration. I just see enable_15 as the username.

3 REPLIES

Re: username in accounting report

Chris,

You need to add this command,

aaa authentication enable console LOCAL

That should fix the issue.

~Regards

~JG

New Member

Re: username in accounting report

i've tried to add that command, but after that no one can login. I have to block asa connection to ACS so it could revert to local authentication.

Is there any solution?

Re: username in accounting report

whenever we do enable authentication, you also need to, on ACS on user accounts , check the appropriate option for "TACACS+ Enable Password"

under "Advanced TACACS+ Settings"

By default its, "Use separate password" which is blank.

So if your user account is local on ACS use "Use CiscoSecure PAP password" or if you are being authenticated from some external database check "Use external database password".....

If you are not able to see the option, the enable it from Interface Configuration > Advanced Option section.

then you'll be able to log into enable mode, and see who made the changes in the logs.

Regards,

Prem

155
Views
0
Helpful
3
Replies
CreatePlease login to create content