capture changes made to routers?

Answered Question
Oct 22nd, 2007

Hi, is it possible to send changes made to routers to a syslog server, we make changes via telnet and console cable and need to keep track of everything.


I have this problem too.
0 votes
Correct Answer by royalblues about 9 years 3 days ago

You can do this via AAA.

But there was recent feature introduced in the IOS which can be helpful and does not need a AAA server

have a look at this link



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.5 (2 ratings)
guruprasadr Mon, 10/22/2007 - 22:18


You can enable SNMP Trap messages for VTY and Console logging.

If the changes is going to be made via only certain sources means, an ACL can be defined with "LOG" enabled.

Best Regards,

Guru Prasad R

whiteford Mon, 10/22/2007 - 23:48

Can I have an example of how I configure this, it would be very helpful.

guruprasadr Tue, 10/23/2007 - 00:15

HI Narayan,

Well and Wish to hear same from you.

Great Link posted by you and it was really helpful in huge production environments operating in various shift timings.

I have recommended to another Project to implement this Techniq.

Thanks for your Link and Great Support. Have rated your POST.

Best Regards,

Guru Prasad R

Pavel Bykov Tue, 10/23/2007 - 00:54

*edit* answered to an older post - didn't see the reply from Narayan.

There are two possible questions in what you are saying.

1. You need to know IF device was configured, and by WHO

2. You need to know WHAT was configured and by WHO.

The first one you can accomplish by using syslog server. The message will always appear in the log is the following:

%SYS-5-CONFIG_I: Configured from console by console

So all you have to do is configure:

logging x.x.x.x

logging trap 5

For the second one, you would need to configure AAA (Authentication, Authorization and Accounting). Particularly accounting of all entered bytes. This is not possible with Syslog AFAIK. Here is a link of TACACS overview.

You will need a TACACS or RADIUS server for this.

Hope this helps

gaurav_thapar79 Tue, 10/23/2007 - 08:14


Your URL is asking for CCO login to which i dont have an access. Can anyone provide me with CCO login?


This Discussion