Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Logging configure terminal

Hello, for a project I need to log to syslog when a user logging in through TACACS enters Configuration Terminal mode, thanks

running cisco 2800 series router

with IOS 12.4(13r)T

2 REPLIES

Re: Logging configure terminal

The command

aaa accounting exec default start-stop group tacacs+

will log all conf t requests directly to the Tacacs server

Try the following commands -

logging host ( sys log Ip )

logging trap informational

else try this command also

logging facility user

Hall of Fame Super Silver

Re: Logging configure terminal

Actually the command aaa accounting exec default start-stop group tacacs+ will send accounting records for creation of exec process (when users log on) but will not send accounting records for config t. If you want to create accounting records for config t, you will need this command aaa accounting commands 15 default start-stop group tacacs+.

Jeff

Note that these send accounting records to a TACACS server not to syslog. Your original post indicated that you need to send them to syslog. I am not aware of any way to log to syslog when someone enters the config t command. Would reports from the TACACS server be an acceptable substitute?

HTH

Rick

253
Views
0
Helpful
2
Replies