Prev: PIX minimal setup for pinging out the inside
Next: Encapsulation in VPN
From: tudalat wong on 18 Dec 2009 17:30
Hi All:
Is there a way to log all the cli commands typed in from the console?
Thanks
tudalat
From: Doug McIntyre on 18 Dec 2009 19:05
tudalat wong <tudalat(a)shaw.ca> writes:
> Is there a way to log all the cli commands typed in from the console?

The easiest way is to setup a TACACS server on a machine and have it
authorize every command line sent through for your logins. You can log
every command then with the aaa config section.

You may be able to do some sort of EMM function to do this, but you'll
have to think about how to get the data off the router to something
that logs then.

Its not a typical setup. Ie. my setup is to have RANCID run every so
often and capture the config for archiving, which includes the last
user's username who wrote out the config, which is totaly sufficient
for audit purposes, config changes don't happen very often at all anyway.





 | 
Pages: 1
Prev: PIX minimal setup for pinging out the inside
Next: Encapsulation in VPN