Accounting on ACS 5 report event
Hi all
I remember GBA 4.2, we can see all orders of this type of user in the console of the router cisco for example, after the user to connect to a router (with orders of AAA and ACS) when we saw on the newspaper article. When the user type "show run" on the log of account you can see. but GBA 5.1 where and how we config and see them?
Thank you
Kamal,
First, you must configure the device to send info credit aaa to GBA box.
GBA 5.x, you can find the info of accounting to the next place.
Monitoring & reports > | ... > | Reports > | Catalog > | AAA Protocol |
Tags: Cisco Security
Similar Questions
-
Hello
Is it possible to set up a favorite report and share with all all the directors of the ACS?
Thank you
Antero
Sharing reports
You can add reports in the Shared folder to make them available to all admins. To add reports in the shared folder:
Choose any report that you want to share.
For example, if you want to share the summary report of health ACS, you would choose followed and reports > reports > catalogue > ACS Instance.
ACS Instance reports page appears > run report.
In this example, the ACS health synthesis report is displayed.
Launching the report in the Interactive Viewer.
Click the back to the upper-left corner of the page viewer Interactive.
The backup window appears.
Choose the Shared folder in a folder list box choose it.
Enter a file name of your choice.
Click Save.
The report is saved in your shared folder and is available to all users.
Note the common reports that were created in older versions of the ACS don't work after upgrade you an earlier version of ACS ACS 5.4 or install a new version of ACS 5.4. Therefore, you must delete the existing shared reports and add them to the point 5.4 ACS.
Kind regards
Jatin kone
-Does the rate of useful messages-
-
Accounting on ACS 3.3, doesn't seem to work.
Hi guys,.
I followed 6 lines configured on our gear, switches, router & Cisco ASA.
However our worm 3.3 ACS did not appear to be seized of the commands used by the CLI users.
1
2
3
4
5
6
AAA authentication login default group Ganymede + local
AAA authentication login VTYLogin group Ganymede + local
AAA authentication login CONLogin group Ganymede + local
the AAA authentication enable default
AAA authorization exec default group Ganymede + local
AAA accounting exec default start-stop Ganymede group.
These 13 lines of configuration I have on our ASA 8.2
1
2
3
5
6
7
8
9
10
11
12
13
RADIUS Protocol RADIUS AAA server
AAA-server RADIUS (inside) host x.x.x.19
timeout 30
cxxxxxxxr key
AAA-server RADIUS (inside) host x.x.x.20
cxxxxxxxr key
AAA-server SDI sdi Protocol
AAA-server SDI (inside) host x.x.x.64
authentication AAA ssh console RADIUS LOCAL
Console http AAA RADIUS authentication
Console Telnet AAA authentication RADIUS LOCAL
AAA authentication secure-http-client
These 15 lines of configuration, I used previously to another organization that I worked at.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
AAA authentication login default line
VTYLogin authentication connection group Ganymede + line of AAA.
CONLogin authentication connection group Ganymede + line of AAA.
AAA authorization config-commands
AAA authorization exec default group Ganymede + authenticated if
AAA authorization commands 0 default group Ganymede + authenticated if
AAA authorization commands 1 default group Ganymede + authenticated if
AAA authorization commands by default 4 Ganymede group.
AAA authorization commands 15 default group Ganymede + authenticated if
AAA accounting send stop-record an authentication failure
AAA accounting exec default start-stop Ganymede group.
orders accounting AAA 15 by default start-stop Ganymede group.
AAA accounting network default start-stop Ganymede group.
Default connection accounting AAA power Ganymede group.
AAA accounting system default start-stop Ganymede group.
Your contribution is very much appreciated and evaluated.
Try looking the GANYMEDE + Administration, report rather than accounting report.
-
Dear support members
I have configured the following devices to send accounting information to ACS 5.1 (running on VMWare)
Routers Cisco & switches
Protocol = Ganymede
Accounting information is sent to the ACS.
&
Wireless controller
Protocol = RADIUS
Accounting information sent to ACS
the two above devices are sending accounting information to ACS, but I'm not finding ways to access this info on ACS.
How can I view these accounting information? It is available under Logs (logs of the client) and if so, can these logs stored locally and accessible by web browser.
Any help will be much appreciated.
Thank you
Ahad
ACS-online monitoring and reports-online reports-online catalog-online AAA Protocol
There you have an accounting Radius and Ganymede...
-
ACS standard reports: must see attrib [04] "NAS-IP-Address.
Hello
We have the following topology.
NAS--> another RADIUS of the seller (proxy)--> ACS 4.0
AUTH works very well, but we have problems with the standard reports offered by ACS.
The past auth report that we must see the address IP SIN original, attrib [04]. The radius of third party (acting as agent) send the attrib as expected (we check using sniffer captures GBA).
What selection need allows us to see this attrib on report?
thnks
Juan
Ahhh. I see the problem.
The report "past authenications" uses the internal dictionary ACS (who manages the two RADIUS & GANYMEDE +).
When CSRadius writes a sound entry using the AAA client ip address (IE peer address) as the value for NAS IP rather than the actual NAS-IP-Address attribute.
Years ago I coded this part and I don't remember why I chose to use peers instead of the nas IP address. I suspect its because in the network config, you add the address of peers (existantespourlesproduitsphytopharmaceuti) and not to the original device. If the the auths newspaper spent has peripheral origin ip would not match the network configuration.
I think that this can be corrected, ACS has an attribute called "Source NAS" but which I think has been added, never used. The service of CSRadius could stuff the nas-ip-address there.
But of course I do not work for Cisco more - so you don't have to ask them to make the change!
Mounira
-
Maximum "user accounts" on ACS 5.1
Is there a maximum number of IDs 'user account' to manage the local database to an ACS 5.1?
Thank you...
It has not coded maximum hard
The product has been tested with over 100 K users in the internal database
-
Adding accounts on ACS using SNMP
Hi people,
I use ACS 4.2 and I was just wondering if it is possible to add user accounts by using snmpset? If so, anyone found any documentation on what needs to be done? I have the SNMP running on it and check with the ACS using snmpget.
Thank you, S.
Hi Shane,
It is unfortunately not possible. You cannot add users via SNMP.
However, you can add multiple users at once using RDBMS synchronization.HTH
Amjad
Sent by Cisco Support technique iPad App
-
I can create a read-only on the ACS 5 Server account? I have the ACSAdmin account.
Thank you
Yes
Reach:
System Administration > directors > accounts > create
Create a new admin with the role of "ReadOnlyAdmin".
Now open as a new admin
-
ALS account does not match distribution event 'Delivery PO in the inventory' IN.
I have an item in stock with an expense account defined. This expense account is used in the distribution of PO. But when the item is received and the transaction hits the GL, the account is different. Information on the place where to look to see what the installation program affect this? Is there diagnostic reports that can help?
I forgot the obvious. A person filled to the account of expenditures on the subiventory. That's what led to the difference of the account.
-
Show accounts with 0 balance report
Hello
My problem is the following. I am creating a budget report that will show me accounts and what is their current value.
I have a lot of lines that have an account (about 10 different). Each line has an amount of spend on it. Let's say like this
ROW_ID, ACCOUNT_ID, VERSION_ID, TYPE, AMOUNT
------------------------------------------------------------------------------
1 2 3 O 100
2 3 3 O 90
3 2 3 O 120
4 1 3 D 1030
5 2 2 O 10
6 4 1 D 190
MBB this is a simplified version.
What I am looking for is the sum of all accounts where type = O id and version = 3.
BTW, O is for (the 'operation')
What I get is
ACCOUNT_ID, TYPE, QUANTITY
--------------------------------------------
2 O 220
3 O 90
What I want is
ACCOUNT_ID, TYPE, QUANTITY
--------------------------------------------
1A 0
2 O 220
3 O 90
4A 0
To put words to Acoount_id 1 version_id 3 and where row_type is O there are no cost.
But if you change the type "D" and leave the version 3, the result would be:
ACCOUNT_ID, TYPE, QUANTITY
--------------------------------------------
1 1090
2 D 0
3 D 0
4 D 0
That's what I have right now.
SELECT KVF. ACCOUNT_ID,
SUM (KVF. BDGT_SUM BDGT_SUM),
MAX ('TRANSACTIONS') TYPE,
KVF. VERSION_ID
Of
K_VIEW_FULL KVF,
C EXPECTED
WHERE
AND KVF. VERSION_ID = 30
AND C.OP_DEV = ID C.CLASSIFICATOR
AND UPPER (K.NAME_SHOW) = UPPER ('Operation')
KVF GROUP. ACCOUNT_ID, KVF. VERSION_ID;
I know I should use joins some how, but I do not know howTry this example:
with your_table as ( select 1 ROW_ID, 2 ACCOUNT_ID, 3 VERSION_ID, 'O' TYPE, 100 AMOUNT from dual union all select 2, 3, 3, 'O', 90 from dual union all select 3, 2, 3, 'O', 120 from dual union all select 4, 1, 3, 'D', 1030 from dual union all select 5, 2, 2, 'O', 10 from dual union all select 6, 4, 1, 'D', 190 from dual ) select all_accounts.account_id ,sums.sum_amount from (select distinct account_id from your_table) all_accounts left join ( select account_id, sum(amount) sum_amount from your_table where type = 'O' and version_id = 3 group by account_id ) sums on all_accounts.account_id=sums.account_id order by 1
Kind regards
Malakshinov Sayan -
Accounting distribution ACS server
Hello
I wanted to install a patch for ACS solution engine. I would like to know how we can configure the distribution server. I refer to the foll.document:
I have an XP machine. I extracted the patch in one of the Windows folder. Now when I try to install the patch to the web interface of ACS. I get an error "failed to contact server.
I would be grateful if someone help me to solve this problem.
Thank you.
Rgds.,.
Sachin
Sachin,
Find enclosed the doc that explains the whole process.
Kind regards
~ JG
Note the useful messages
-
I wanted to know whether or not this correspondence came from Firefox.
Thank you
Beverly Claybrooks
No, Hotmail is a service of Microsoft, not Mozilla.
-
Error of org.xml ACS 5.3 Exception when executing reports
Hello
5.3 GBA running on a device of 1121
When you run a report's RADIUS authentication, accounting, etc. is all report, I get the error attached image (org.xml.sax.SAXParseException...). I have not yet found a solution. I'm running another ACS 5.2 device that does not have this error
If the upgrade to a newer version will solve this problem, the license (5.3) will suffice.
Any help is appreciated
Kind regards
MOE Shea
Hello Mo,
I have this error either a browser problem, I recommend you watch the ACS 5.3 release notes and confirm if you are currently using a supported browser:
http://www.Cisco.com/c/en/us/TD/docs/net_mgmt/cisco_secure_access_contro...
A restart of services can take care of it as well in case you are using a supported browser.
Note: Please mark as answer as appropriate
-
ACS command authorization mode t conf report
Hi, this is probably a quick, but I couldn't find a solution so far.
We use authorization to order through ACS and are thus able to see (in the case of problems) which concluded the orders at that point on which device. But it doesn't work until someone goes into mode t conf. After that I get log entries in the ACS (Version 5). I can see all the orders and who entered the configuration mode, but nothing after that. Excerpt from the configuration:
AAA new-model
connection of AAA 5 authentication attempts
enable AAA authentication login default group Ganymede + local line
the AAA authentication enable default group Ganymede + activate
AAA authorization exec default group Ganymede + local
AAA authorization commands 1 default group Ganymede + local
AAA authorization commands 15 default group Ganymede + local
AAA accounting exec default start-stop Ganymede group.
orders accounting AAA 1 by default start-stop Ganymede group.
orders accounting AAA 15 by default start-stop Ganymede group.
AAA - the id of the joint sessionMy guess is that I'm hosting orders with that and so no permission is necessary.
Any idea?
Thank you
Chris
Hello
What do you watch? Take a look at RADIUS accounting and authorization Ganymede reports.
Thank you
John
-
I have problems to install the updates & cannot get rid of a text called events Reporting document
I have problems installing updates-i followed the repair according to the windows help - tell that to completely empty the software distribution file. However I can't get rid of a Word document called reporting events. When I go to deleate it it tells me that cannot perform this action as its already open in an another help file?
Hello
Yes, try to do a restore system from safe mode and check if it helps.
http://Windows.Microsoft.com/en-us/Windows-Vista/system-restore-frequently-asked-questions
It will be useful.
Maybe you are looking for
-
When will be available tool for the Italian language. Worms. 30.0
I've updated to thunderbird, but it is in English. I need tools for the Italian language, but the "it.xpi" file is not compatible with the version just downloaded (30.0).
-
Unable to sign in on the google toolbar
Updated Firefox to upgrade to 6.0.2 and suddenly, I am not able to connect using the Google toolbar.I tried various configurations to no avail. Any solution?
-
How to remove pop up TotalVPN?
Recently, there is a pop-up that appears on my desktop. Even if I open Safari, it also appears. I tried to check and block plugin and pop up on the preferences of Safari, but this does not work. It is ads that appear every time I open my laptop. MacB
-
I have 9 other "desktop" folders in my file user desktop screen.
The computer is a Toshiba Satellite with Vista Home Premium SP2 64-bit operating system. When I click on the folder of the user on the desktop of the screen and click on the desktop icon in the folders pane, I see the normal icons. Under the user fol
-
Network problem after installing some windows updates
My knees installed this windos updates automatically. kb2656351kb2572078kb2539636kb2533523kb2518870kb2478663kb2468871KB2446708 kb2656351kb2533523kb2487367kb2468871 to restart windows 7 I lost my Internet and I can't work in my network? Can you help m