Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Enabling accounting for Telnet seesions

Hi all,

how can i enable accounting (monitoring) for all telnet sessions happening on my router. site engineers login to my routers for different reasons, so i need to provide them a user name and password and review the log for their activites on routers.

Can we configure this utility in router IOS..

Regards

Mohamed

2 REPLIES
Community Member

Re: Enabling accounting for Telnet seesions

Once you configure usernames/passwords for your users, when they log in to the router either via console or telnet, you will see a message in the log saying "confiuged by..."

You could also set up an access-list that logs all tcp connections on port 23 made to your router. The router will only tell you who accessed the router, it will not log their activities. You can limit the commands your users can enter with the use of privilege levels.

Bronze

Re: Enabling accounting for Telnet seesions

Hi,

What you are looking for is TACACS+. It will authenticate connections to the routers and log all commands and who did them. The usernames and passwords are stored on a server so managing users is much easier too.

Have a look at this: http://www.cisco.com/en/US/partner/products/sw/iosswrel/ps1835/products_configuration_guide_chapter09186a00800ca7ac.html

-- Warren.

88
Views
5
Helpful
2
Replies
CreatePlease to create content