Specifications

3-434
Cisco Wide Area Application Services Command Reference
OL-21611-01
Chapter 3 CLI Commands
(config) aaa accounting
Device Modes application-accelerator
central-manager
Examples The following example shows how to configure TACACS+ on the WAAS device, specify that a start
accounting notice should be sent at the beginning of the process and a stop accounting notice at the end
of the process, and request that the user process should begin regardless of whether the start accounting
notice was received by the accounting server:
WAE(config)# tacacs key abc
WAE(config)# tacacs server 192.168.50.1 primary
WAE(config)# aaa accounting system default start-stop tacacs
WAE# show aaa accounting
Accounting Type Record event(s) Protocol
----------------------------------------------------------------
Exec shell unknown unknown
Command level 0 unknown unknown
Command level 15 unknown unknown
System start-stop TACACS+
The following example shows that the WAAS device is set to record all user EXEC sessions. The
command also specifies that a stop accounting notice should be sent to the TACACS+ server at the end
of the session.
WAE(config)# aaa accounting exec default stop-only tacacs
The following example shows that the WAAS device is set to record all CLI commands executed by a
normal user. The command also specifies that a stop accounting notice should be sent to the TACACS+
server at the end of each CLI command executed by a normal user.
WAE(config)# aaa accounting commands 0 default stop-only tacacs
The following example shows that the WAAS device is set to record all CLI commands executed by an
administrative user. The command also specifies that a start accounting notice should be sent to the
TACACS+ server at the beginning of the process and a stop accounting notice at the end of the process.
The CLI command executed by the administrative user does not proceed until the start accounting notice
has been acknowledged.
WAE(config)# aaa accounting commands 15 default wait-start tacacs
The following example shows the EXEC shell accounting report that is available on the TACACS+
server:
Wed Apr 14 11:19:19 2004 172.16.0.0 super10 pts/0 172.31.0.0 start
start_time=1081919558 task_id=3028 timezone=PST service=shell
Wed Apr 14 11:19:23 2004 172.16.0.0 super10 pts/0 172.31.0.0
stop stop_time=1081919562 task_id=3028 timezone=PST service=shell
Wed Apr 14 11:22:13 2004 172.16.0.0 normal20 pts/0 via5.abc.com start
start_time=1081919732 task_id=3048 timezone=PST service=shell
Wed Apr 14 11:22:16 2004 172.16.0.0 normal20 pts/0 via5.abc.com stop
stop_time=1081919735 task_id=3048 timezone=PST service=shell
Wed Apr 14 11:25:29 2004 172.16.0.0 admin ftp via5.abc.com start start_time=1081919928
task_id=3069 timezone=PST service=shell
Wed Apr 14 11:25:33 2004 172.16.0.0 admin ftp via5.abc.com stop stop_time=1081919931
task_id=3069 timezone=PST service=shell
The following example shows the system accounting report that is available on the TACACS+ server:
Wed Apr 14 08:37:14 2004 172.16.0.0 unknown unknown 0.0.0.0 start start_time=1081909831
task_id=2725 timezone=PST service=system event=sys_acct reason=reload
Wed Apr 14 10:19:18 2004 172.16.0.0 admin ttyS0 0.0.0.0 stop stop_time=1081915955