Is it possible to somehow log the commands entered on a Cisco router 3825 to a syslog server. I've got syslog logging set up on the router, but even when I set the level to "Debugging", it doesn't show the commands entered. I can only see when someone exits out of "config terminal". We need to implement command auditing.
No, there really is no way to do real-time command logging.
Your best shot there is to either turn on capture from the terminal program, or set a management platform to watch for console messages (like exiting from config-t) and do a "diff" or similar on the configs to see what's been changed (if anything).
I supppose you could install an intermediate system; one that is set up to be the only system permitted (by ACL) to access the router(s) by telnet /SSH, then "T" or shim the system to capture the bidirectional traffic to the router (and into your logs)... basically a Telnet Proxy to the routers.
There's probably another couple ways to handle your situation ... this is all that comes to mind for me right now.
Nadim is right that the accounting function of aaa provides this functionality very well. At a customer site where I do a lot of work we use this on all our routers and it is very effective. I am not aware of any way to do this with syslog.
We are pleased to announce availability of Beta software for 16.6.3.
16.6.3 will be the second rebuild on the 16.6 release train targeted
towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are
looking for early feedback from customers befor...
Introduction Featured Speakers Luis Espejel is the Telecommunications
Manager of IENova, an Oil & Gas company. Currently he works with Cisco
IOS® and Cisco IOS XE platforms, and NX to some extent. He has also
worked as a Senior Engineer with the Routing P...
In this session you can learn more about Layer 3 multicast and the best
practices to identify possible threats and take security measures. It
provides an overview of basic multicast, the best security practices for
use of this technology, and recommendati...