How to trap configuration changes on Cisco ASA and other cisco devices

[sathish.ippani]

We want to monitor the Network devices configuration changes on our Cisco ASA, Nexus, Router and Switch.

Like we want check each and every change say. enginner login to device and configured IP add

#conf t

# ip add x.x.x.x mask 255.0.0.0

shut/no shut

here we should get details like username, total commands(conf t, ip add x.x.x.x mask 255.0.0.0 and shut/no shut) he exucuted during his login to device.

Thanks in advance.

[Tagir Temirgaliyev]

1. cisco acs (access control server)

2. 

conf t

archive
 log config
  logging enable
  hidekeys

and you can see later all comands

sh arc log conf all

and dont forget to rate post

[sathish.ippani]

thanks for reply,

Is it gives user information with time stamp

[Tagir Temirgaliyev]

1. cisco acs with timestamp and user

2.

archive
 log config
  logging enable
  notify syslog contenttype plaintext
  hidekeys

in syslog server you will see comands with timestamp too

when you see

sh arc log conf all

 it shows without timestamp

and dont forget to rate post