Accounting Overview; Authentication And Accounting Configuration Quick Start - Cisco 4700M Configuration Manual

Authentication and Accounting Configuration Quick Start

Accounting Overview

Authentication and Accounting Configuration Quick
Start
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
2-8
Accounting tracks and maintains a log of useful information during each user
management session with the ACE. You can use this information to generate
reports for troubleshooting and auditing purposes. Accounting logs can be stored
locally on the ACE or sent to remote AAA servers. If the ACE is also configured
to authenticate the user, the AAA server maintains accounting information by
username.
For a TACACS+ server, accounting information includes user commands
•
entered on the ACE, the duration of each session, and when sessions start and
stop.
For a RADIUS server, accounting information includes the duration of each
•
session and when sessions start and stop.
When ACE user commands are being logged on a TACACS+ server, the server
prefaces each command with either a "<0:>" or a "<1:>" to indicate the success
or failure of the command as issued by a user on the ACE CLI. For example, when
a user attempts to enter a command on the ACE and that user does not have the
correct role privileges, a "<1:>" appears to indicate a failure.
Table 2-1 provides a quick overview of the steps required to create and configure
authentication and accounting for the ACE. Each step includes the CLI command
required to complete the task.
Chapter 2 Configuring Authentication and Accounting Services
OL-16202-01