Security | 879Configure Accounting of EXEC and privilege-level command usageThe network access server monitors the accounting functions defined in the TACACS+ attribute/value(AV) pairs.In the following sample configuration, AAA accounting is set to track all usage of EXEC commands andcommands on privilege level 15.System accounting can use only the default method list:aaa accounting system default start-stop tacacs+Configure AAA Accounting for terminal linesUse the following commands to enable accounting with a named method list for a specific terminal line(where com15 and execAcct are the method list names):Monitor AAA AccountingFTOS does not support periodic interim accounting, because the periodic command can cause heavycongestion when many users are logged in to the network.No specific show command exists for TACACS+ accounting. To obtain accounting records displayinginformation about users currently logged in, perform the following task in Privileged EXEC mode:Figure 43-1. show accounting Command Example for AAA AccountingCommand Syntax Command Mode Purposeshow accounting CONFIGURATION Step through all active sessions and print all the accounting recordsfor the actively accounted functions.FTOS(conf)#aaa accounting exec default start-stop tacacs+FTOS(conf)#aaa accounting command 15 default start-stop tacacs+FTOS(config-line-vty)# accounting commands 15 com15FTOS(config-line-vty)# accounting exec execAcctFTOS#show accountingActive accounted actions on tty2, User admin Priv 1Task ID 1, EXEC Accounting record, 00:00:39 Elapsed, service=shellActive accounted actions on tty3, User admin Priv 1Task ID 2, EXEC Accounting record, 00:00:26 Elapsed, service=shellFTOS#
