From: Granofsky, Aaron (AGranofsky@xxxxxxxxxxx)
Date: Thu Sep 28 2000 - 15:07:15 GMT-3
Title: RE: Question regarding Cisco Secure and AS5200 server
Abdul,
The following statements are required on the router for the telnet
session:
aaa authentication login default tacacs+
aaa authorization exec tacacs+
aaa accounting exec start-stop tacacs+
On CSNT click on Shell(Exec) under the group profile.
If you add these commands you can also do AAA on the commands that are
entered:
aaa authorization commands <0-15> tacacs+
aaa accounting commands start-stop tacacs+
To suppport command AAA on CSNT do the following within the group
profile:
assign a privilege level to the group
(optional) select the command box, and permit or deny any commands
Hope this helps,
Aaron
-----Original Message-----
From: abdul_rahim@ccsi.canon.com [mailto:abdul_rahim@ccsi.canon.com]
Sent: Thursday, September 21, 2000 11:37 AM
To: ccielab@groupstudy.com
Subject: Question regarding Cisco Secure and AS5200 server
Hi all
Can we log the connections ( telnet ) the dial up user makes after he
gets
authenticated by TACACS+ ( Cisco secure )
If yes then what are the neccessary steps needed both on the AS5200
Server
and the Cisco Secure for NT software as well
I did find that aaa accounting connection comand but It doesent shows
me
any thing on the Cisco Secure
Can any body help me on it
Thanks
Abdul Rahim
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:25:08 GMT-3