AAA Accounting on Routers/Firewalls...

Author	All Replies
jlazzaro join:2005-09-29 Bel Air, MD	AAA Accounting on Routers/Firewalls... I have SBR setup on all the routers/firewalls, they all authenticate fine with no problems. However, I would like to know who is logged into what via the SBR Administration Current Sessions. I have a 3Com HiPer ARC setup with accounting and I can view the sessions no problem, but this is not true for any of the cisco routers/firewalls... On the Firewalls, I have: aaa accounting include any outbound 0 0 0 0 RADIUS On the Routers, I have: aaa accounting connection acct-list start-stop group radius line vty 0 4 accounting connection acct-list Even with these commands, I am not seeing any Accounting from the Cisco's in the SBR log file. Are these commands correct for viewing current telnet sessions? Thanks!
jlazzaro join:2005-09-29 Bel Air, MD	to forum · permalink · 2006-03-28 10:39:58 ·
Covenant Premium,MVM join:2003-07-01 England	Not sure what you asking so I will just copy and paste the whole AAA config: aaa new-model ! ! aaa group server tacacs+ GlobalTACS server-private x.x.x.x key 7 xxxxxx ip vrf forwarding Global ip tacacs source-interface Loopback0 ! ! aaa authentication login default group GlobalTACS local aaa authentication login no_tacacs enable aaa authentication login consoleport none aaa authorization exec default group GlobalTACS local aaa accounting exec default start-stop group GlobalTACS aaa accounting commands 1 default start-stop group GlobalTACS aaa accounting commands 15 default start-stop group GlobalTACS aaa accounting system default start-stop group GlobalTACS ! Just substitute the TACACS+ group config for whichever one you are using. -- If only my employers can see how much effort I put into the Cisco forum. They would then understand why I sleep at my desk. :p
Covenant Premium,MVM join:2003-07-01 England	to forum · permalink · 2006-04-02 06:34:18 ·

Equipment Support > Hardware By Brand > Cisco > AAA Accounting on Routers/Firewalls...