We are trying to integrate DNAC with ISE purely for Tacacs. We are able to authenticate and authorize users fine via Tacacs but we are not getting any tacacs command accounting sent to ISE.

Intention is to capture activity users perform on DNAC Gui.


  • I'm not sure it does any tacacs authorization, just authentication. Doesn't DNAC have its own audit logs?
    – Ricky
    Mar 29 at 10:53
  • Authorization works as you can define custom attributes to pass on rbac information.
    – Nad84
    Mar 31 at 0:53
  • To update we have Cisco TAC advise that DNAC doesnt use tacacs accounting feature as its using API and would need to export audit logs to a syslog server
    – Nad84
    May 30 at 2:50


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.