Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE 26.1.x

PDF

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE 26.1.x

Web UI configuration command accounting in TACACS+ server

Updated: April 10, 2026

Want to summarize with AI?

Log in

Explains how Web UI configuration command audits enable traceability and accountability for configuration changes made through the controller GUI, by logging these changes to a TACACS+ server.

A Web UI configuration command audit is a security feature that

  • records configuration changes executed through the controller's GUI

  • logs audit information to a TACACS+ server for centralized tracking, and

  • includes details such as the executed command, the user responsible, and session parameters.

The Cisco Catalyst 9800 series wireless controller configuration is stored in databases.

Feature history for Web UI configuration command accounting in TACACS+ server

This table provides release and related information for the feature explained in this module.

This feature is also available in all the releases subsequent to the one in which they are introduced in, unless noted otherwise.

Table 1. Feature history for Web UI configuration command accounting in TACACS+ server

Release

Feature

Feature Information

Cisco IOS XE Cupertino 17.9.1

Logging Web UI-Based Configuration Changes in TACACS+ Server

This feature logs all configuration changes made in controller web UI.

Support for logging configurations done in IOS console in TACACS+ server is already available.

Guidelines for Web UI configuration command accounting in TACACS+ server

  • By default, configuration commands are not logged to the TACACS+ server unless command accounting is configured.

  • All commands are accounted for only when AAA default command accounting is configured for privilege level 15.

  • If AAA default command accounting is not configured, and you want commands to be logged to the TACACS+ server, use these methods:

    1. The HTTP named method list command accounting.

    2. The AAA named method list (same as the one configured in Step 1) command accounting.