Wired Intelligent Edge

 View Only
Expand all | Collapse all

AAA Authentication\Accounting logging -- CLI Command Logging and command restictions

This thread has been viewed 1 times
  • 1.  AAA Authentication\Accounting logging -- CLI Command Logging and command restictions

    Posted Feb 17, 2012 08:07 AM

    Hi@ all

     

    i have implemented AAA Authentication/Authorisation/Accounting aginst a TACACS Server. Now i want to restict different commands for different Users like Helpdekuser Group and Admin Group ( Helpdeskuser should have only sh.. commands and they are allowed to activated ports). The next step is i want to log any entered commands on the CLI, to a logfile to see who has entered the commands for a revision in case of error configs. By cisco it was possible to use Accounting and configure a CISCO ACS server on this server all activities are logged and stored. Now my question is how it works with procurve switches or has somebody another solution for this?

     

    thx for help

     

     



  • 2.  RE: AAA Authentication\Accounting logging -- CLI Command Logging and command restictions

    Posted Mar 15, 2012 04:00 PM

    Hi,

     

    As I know the HP E-series (ProCurve) switches are AAA compatible with RADIUS and only Authentication with TACACS so what you are looking for supposed to be in the Cisco ACS RADIUS not TACACS.

     

    Regards,