Cisco Systems Servers Server User Manual


 
Chapter 1 Overview of Cisco Secure ACS
AAA Server Functions and Concepts
1-18
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
configuration. You can easily import these logs into popular database and
spreadsheet applications for billing, security audits, and report generation.
Among the types of accounting logs you can generate are the following:
TACACS+ AccountingLists when sessions start and stop; records AAA
client messages with username; provides caller line identification
information; records the duration of each session.
RADIUS AccountingLists when sessions stop and start; records AAA
client messages with username; provides caller line identification
information; records the duration of each session.
Administrative AccountingLists commands entered on a network device
with TACACS+ command authorization enabled.
For more information about Cisco Secure ACS logging capabilities, see
Chapter 9, Working with Logging and Reports.
Other Accounting-Related Features
In addition to the accounting-related features discussed in this section, the
following features are provided by Cisco Secure ACS:
Centralized logging, allowing several Cisco Secure ACS servers to forward
their accounting data to a remote Cisco Secure ACS server (see the Remote
Logging section on page 9-29)
Configurable supplementary user ID fields for capturing additional
information in logs (see the User Data Configuration Options section on
page 3-3)
Configurable logs, allowing you to capture as much information as needed
(see the Accounting Logs section on page 9-4)
Administration
To configure, maintain, and protect its AAA functionality, Cisco Secure ACS
provides a flexible administration scheme. You can perform nearly all
administration of Cisco Secure ACS through its HTML interface.