1. In out network, I have several 7206VXR routers at certain strategic nodes within the network. A select group of engineers are allowed to make configuration changes. There are another 800 network devices which use the TACACs server for secure login. The server is not capable of recording all configuration changes throughout the network.
2. Is there a AAA accounting command which would allow the configuration changes made by the user to be retained in a file on the router where the changes were made?
Re: keeping track of command entered by user login
No. Command accounting is only done to a TACACS server.
Why don't you just configure command accounting on the several 7206VXR's and send those to your TACACS server, and don't configure any command accounting on the other 800 network devices. Just because they use the TACACS server for authentication does't mean they have to do accounting as well.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...