<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2800.1476" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=471450001-23032007>No, the cisco devices do not send command logs via
radius. I compiled a tacacs server and configured it to handle accounting
records. I then used the following to set up aaa on the
router:</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=471450001-23032007></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=471450001-23032007>aaa new-model<BR>aaa authentication login default group
radius local<BR>aaa authentication login localauth local<BR>aaa authentication
ppp default if-needed group radius local<BR>aaa authorization exec default group
radius local<BR>aaa authorization network default group radius local<BR>aaa
accounting send stop-record authentication failure<BR>aaa accounting exec
default stop-only group tacacs+<BR>aaa accounting commands 15 default start-stop
group tacacs+<BR>aaa accounting network default wait-start group radius<BR>aaa
accounting system default start-stop group radius</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=471450001-23032007></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=471450001-23032007>tacacs-server host 192.168.0.15<BR>tacacs-server key
XXXXXXXX<BR>radius-server host 192.168.0.15 auth-port 1812 acct-port 1813 key
XXXXXXXX<BR>radius-server retransmit 3<BR>radius-server vsa send
accounting</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV><SPAN class=471450001-23032007><FONT face=Arial color=#0000ff size=2>The
tacacs server is avaliable here: </FONT></SPAN><FONT face=Arial
color=#0000ff size=2><A
href="http://www.pro-bono-publico.de/projects/">http://www.pro-bono-publico.de/projects/</A></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV><SPAN class=471450001-23032007><FONT face=Arial color=#0000ff
size=2>regards,</FONT></SPAN></DIV>
<DIV><SPAN class=471450001-23032007><FONT face=Arial color=#0000ff size=2>Frank
Ranner</FONT></SPAN></DIV>
<DIV><BR></DIV>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B>
freeradius-users-bounces+frank.ranner=defence.gov.au@lists.freeradius.org
[mailto:freeradius-users-bounces+frank.ranner=defence.gov.au@lists.freeradius.org]
<B>On Behalf Of </B>satish patel<BR><B>Sent:</B> Thursday, 22 March 2007
17:33<BR><B>To:</B> freeradius-users<BR><B>Subject:</B> freeradius cisco
command accounting<BR></FONT><BR></DIV>
<DIV></DIV>Dear's<BR><BR>
is there any feature in freeradius provide cisco command accouning means users
run command on cisco router and radius provide me command log ?? per users i
want to replace my tacace with freeradius<BR><BR><SPAN
class=471450001-23032007><FONT face=Arial color=#0000ff
size=2> </FONT></SPAN></BLOCKQUOTE></BODY></HTML>