AAA Command Accounting on Cisco ASA 5520

[kunz12]

Hi Folks -

I've configured command accounting (tacacs+) on an ASA 5520 but don't see any commands logged on the reports for tacacs+ accounting.

Here's the configuration of AAA on the 5520:

aaa accounting enable console AEM_Access
aaa accounting ssh console AEM_Access
aaa accounting telnet console AEM_Access
aaa accounting serial console AEM_Access
aaa accounting command AEM_Access

The server group AEM_Access has two servers defined which are running Cisco ACS. The version of Cisco ACS I was running had a bug with command accounting. I applied the patch that supposedly fixes the issue. But still no luck.

Essentially I want to record all the commands that are typed in by different admin's working on the ASA.

Any help would be appreciated.

 

[Supergrrover]

Found this -

http://supportwiki.cisco.com/ViewWi...in_Radius_Accounting_or_logged_in_user_report

It might help. What do your logs and debugging say?


Brent
Systems Engineer / Consultant
CCNP, CCSP