AAA Authentication\Accounting logging -- CLI Command Logging and command restictions

[Makana1980]

Hi@ all

i have implemented AAA Authentication/Authorisation/Accounting aginst a TACACS Server. Now i want to restict different commands for different Users like Helpdekuser Group and Admin Group ( Helpdeskuser should have only sh.. commands and they are allowed to activated ports). The next step is i want to log any entered commands on the CLI, to a logfile to see who has entered the commands for a revision in case of error configs. By cisco it was possible to use Accounting and configure a CISCO ACS server on this server all activities are logged and stored. Now my question is how it works with procurve switches or has somebody another solution for this?

thx for help

[annh83]

Hi,

As I know the HP E-series (ProCurve) switches are AAA compatible with RADIUS and only Authentication with TACACS so what you are looking for supposed to be in the Cisco ACS RADIUS not TACACS.

Regards,