ACS - ASA Authorization and Accounting


I have some questions regarding
authorization and accounting on ASA via ACS server

    1. when I enable the command "aaa authorization
      command " to control SSH users commands  I get locked out on
      console then i have to configure the console , telnet , and enable to be
      authenticated via tacacs too , is there any way to authorize SSH via
      tacacs while keeping Console and telnet authenticated locally or even no
      authentication ?
    2. i issued  accounting command "aaa accounting
      command TAC" on ASA but i noticed that the ACS just logs commands in
      configuration mod "privilege 15 " not any show command or
      privilege 1 , is there any way to fix this ?
    3. does RADIUS support SHELL authorization ?


Thanks for your support

Sign In or Register to comment.