on a router what specific command that i can see the activities (e.g. config changes, parameter , etc.) that a user did on the device? Also, if a user just log on user mode will the device still log his/her activities?
Thanks, is show log alone can trace what are the activities a user did on a device? what happened is that my colleagues saying that I did a save command on a router which honestly didnt do. I look at the router's log using sh log command but didnt find anything. I just want to know how he were able to say that i do save command that equals to a change.
Oliver, bellow is an example of what is recorded in router, any command entered that have changed or altered the router's configuiration is saved in archive in router if you choose to do so when configuring this feature , configuration entered in router is also relay to my syslog server, since I am the only network person I do not need ACS nor local AAA , so this is why in the output bellow you see user "unknown" .
in config mode you simply need the bellow statements.
logging size 50
you may also do a question mark to see other sub-commands features
you may want to also add in config mode:
login on-failure log
login on-success log
.May 4 20:32:06 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user logged command:!exec: enable
.May 4 20:37:02 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user logged command:!exec: enable
Hi Sam, not realy impact on CPU at all, this minimal messaging syslog information, this is only when authorize user or users are logged in to router and at least you can know what was chnaged, but no much proccessing involved on CPU.
I used tacacs long time ago in another job , I loved it, but this feature is great as well , Im sure you can have it in addition with TACACS, it is great, I use Kiwi Cattools to back up routers config and I always noticed even when CatTools access the router to backup the config.
This is actually a pretty cool feature, i didn't even know it existed until I was looking for a solution to advertise a subnet (prefix in BGP talk), only if a certain condition existed. This is exactly what conditional advertisements does
j ai une question j ai achete un routeur cisco 887VA-k9 , je le configuré avec la configuration ci- dessous
si je le lier avec mon pc portable sur l un de ses ports directement ça marche toute est bien ( la connexion internet + m...
Attached policy provides CLI access to the Cisco 4G router over text messaging. Two files are in the attached .tar file:
2. PDF with instructions on how to load and use the .tcl file.