Forum Discussion

Bhavik_384677's avatar
Bhavik_384677
Icon for Nimbostratus rankNimbostratus
Mar 14, 2019

Unable to receive start and stop tacacs+ Accounting packets from BIG-IP F5 device

Hi, I have configured Tacacs+ accouting as mentioned in below document: https://support.f5.com/csp/article/K13762

 

Now when i capture the accounting packets in wireshark, i do see: Auth Method: TACACSPLUS (0x06) Arg[0] value:service=system Arg[4] value:event=cmd_acct

 

In the accounting packet, we will be having flag set for accounting start and accounting stop, but in F5 accounting packet, we only see the Update flag is set but not start or stop. Is there any other configuration to set the tacacs+ accounting start and stop flag ?

 

No RepliesBe the first to reply