Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

log any configuration command

Hi

In our network I am looking for solution in order to log any command that has been excuted on cisco devices by every user.

It means, If user A excuted "show run int X/X" this command is to sent to log server or save in one server.

What solution do you suggest for my purpose ?

Thanks in advance

2 REPLIES
Hall of Fame Super Gold

log any configuration command

You can configure AAA accounting to send accounting records to report commands that users have entered and then can store the records and can report on the records from your AAA server. I have done this quite often using TACACS and it works pretty well. The configuration statement might look something like this

aaa accounting commands 15 default start-stop group tacacs+

HTH

Rick

log any configuration command

Cisco Access Control Server

ACS

303
Views
0
Helpful
2
Replies
CreatePlease to create content