Specifications

4-25
Cisco Global Site Selector Administration Guide
OL-5480-01
Chapter 4 Managing GSS User Accounts Through a TACACS+ Server
Specifying TACACS+ Accounting on the GSS
Specifying TACACS+ Accounting on the GSS
TACACS+ accounting enables you to monitor GSS CLI commands or primary
GSSM GUI pages and user actions executed in the GSS. The information is
contained in an accounting record and is transmitted from the GSS to the
TACACS+ server. Each record can include a number of fields such as user name,
the executed CLI command, the accessed primary GSSM GUI page and the
performed action, and the time of execution. The Cisco Secure ACS records its
logs in comma-separated value (CSV) text files. You can import CSV log files into
many popular spreadsheet applications. If required, you can generate the
CSV-exported spreadsheet as an HTML table using a number of CSV-to-HTML
applications.
Ensure that you enable logging for accounting reports on the TACACS+ server
and that you select the attributes that you wish to log. For general guidelines on
the recommended setup of a TACACS+ server for accounting (the Cisco Secure
ACS in this example), see the
“Configuring Accounting Settings on the
TACACS+ S erver” section.
Use the aaa accounting command to enable the TACACS+ accounting service.
The syntax for this global configuration command is:
aaa accounting {commands | gui}
The options for this command are:
• commands—Enables the TACACS+ accounting service for monitoring the
use of GSS CLI commands. The commands option applies to the user-level
and privileged-level EXEC mode commands that a user issues. Command
accounting generates accounting records for all user-level and
privileged-level EXEC mode commands, including global configuration and
interface configuration commands.
• gui—Enables the TACACS+ accounting service for monitoring access to the
primary GSSM GUI pages and the actions performed on those pages.
To enable TACACS+ accounting for the GSS CLI, enter:
gss1.example.com(config)# aaa accounting commands
Use the no form of the aaa accounting command to disable the TACACS+
accounting function. To disable TACACS+ accounting for the GSS CLI, enter:
gss1.example.com(config)# no aaa accounting commands