Configuring TACACS+ accounting

Determines for which applications TACACS+ collects accounting information. Use TACACS+ accounting to track the services that users access and the amount of network resources that users consume. If unassigned, TACACS+ does not perform the accounting function.

If enabled, TACACS+ accounting logs the following events:
  • User log on and log off

  • Log off generated because of activity timeout

  • Unauthorized command

  • Telnet session closed (not logged off)

If unassigned, TACACS+ does not perform the accounting function. No default value exists.

Procedure

  1. Enter Global Configuration mode:

    enable

    configure terminal

  2. Enable TACACS+ accounting:

    tacacs accounting enable cli

  3. Optional: Disable TACACS+ accounting:

    no tacacs accounting cli

    tacacs accounting disable [cli]

Example

Enable TACACS+ accounting:

Switch:1>enable
Switch:1#configure terminal
Switch:1(config)#tacacs accounting enable cli