Cisco IOS Device accounting in SBR

[rajat.das_]

Hi,

I am using a SBR 6.1 GEE for AAA of several network devices. Currently configuring Cisco IOS devices so that NOC users are authenticated from SBR for their sessions with Cisco devices. I have gone through related docs, tech notes, discussions regarding customization at SBR end and at the Cisco end with relevant VSA editing.

After doing the practice we are able to successfully authenticate NOC users when they are logging into Cisco devices and also accounting records are coming with session start-stop, however not able see the Cisco CLI commands being entered during user sessions.

For Junos based devices we are able to see the CLI commands users are using.

I will delighted if anybody reply me with solution and also thanks a lot in advance.

Regards,

Rajat Das

[apaul_]

Hi,

Did you check whether Cisco IOS devices support aaa accounting commands through the RADIUS interface as well ?

I thought on these devices AAA command accounting only supports TACACS+ as the AAA transport protocol.

Thanks

[Raveen_]

Please check if you ahve configured aaa authorization in Cisco switches.

Other thing to verify is to check if you have configured correct radius client and have added all relevant VSA in dictionary and account.int files.

Regards,

Raveen

Note: You could mark this post as 'accepted solution' if this answers your question that way it might help others as well, a kudo would be a bonus thanks!!