Hi,
I'm trying to get my acs server to log all the commands that are used during the users session on a network device. I have everything up and running but it won't log the commands at all. Here is my config for AAA from my 2950 switch.
aaa new-model
aaa authentication login default tacacs+ local
aaa authentication enable default tacacs+ local
aaa authorization commands 1 default tacacs+ local
aaa authorization commands 15 default tacacs+ local
aaa accounting exec default start-stop tacacs+
aaa accounting commands 1 default start-stop tacacs+
aaa accounting commands 15 default start-stop tacacs+
aaa accounting connection default start-stop tacacs+
aaa accounting system default start-stop tacacs+
Can only routers commands be logged by the acs server, or can switches as well. This is a test environment and would like to figure it out. Also, I have nothing showing up under my TACACS+ administration log but have lots under my TACACS+ accounting log. I have enable the administration log on the acs server and nothing changed.
Thanks,
