Accounting

AAA clients use the accounting functions provided by the RADIUS and TACACS+ protocols to communicate relevant data for each user session to the AAA server for recording. Cisco Secure ACS writes accounting records to a comma-separated value (CSV) log file or ODBC database, depending on your configuration. You can easily import these logs into popular database and spreadsheet applications for billing, security audits, and report generation. You can generate the following types of accounting:

• Administrative accounting Lists commands entered on a network device with TACACS+ command authorization enabled

• RADIUS accounting Lists when sessions stop and start; records AAA client messages with username; provides CLID information; and records the duration of each session

• TACACS+ accounting Lists when sessions start and stop; records AAA client messages with username; provides CLID information; and records the duration of each session

The Cisco Secure ACS provides the following accounting features:

• Configurable supplementary user ID fields for capturing additional information in logs

• Centralized logging, allowing several Cisco Secure ACS servers to forward their accounting data to a remote Cisco Secure ACS server

• Customizable logs, enabling you to capture as much information as needed

0 0

Post a comment