Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

Router login

How to keep track of users logging in to the routers!I need to know who are all logging in to my router and what change they done!from which source IP.please help!tell me an application which keep track of login details of users

5 REPLIES

Re: Router login

TACACS or RADIUS.

Hall of Fame Super Silver

Re: Router login

K.G. Pramod

You can configure aaa accounting exec to send accounting records that will show who has logged in to your routers (and it will show from what IP address they have logged in). You can also configure aaa accounting commands 15 that will send accounting records that will show the privilege commands that are entered (including all config changes).

HTH

Rick

Super Bronze

Re: Router login

As Richard notes, TACACS can log individual changes. However, I believe if the router has a valid external time source, and an authenicated user, it will record the user ID and time in the config file and will note the change in the syslog. This wouldn't indicate detailed changes, only when something was changed and by who (user ID) (and source IP?).

Another alternative, some external packages will track config changes. For instance, I've worked with Cisco's NCM. Such a package will provide not only who changed the config (requires authenicated logon?) but can show before and after configs with changes highlighted.

Hall of Fame Super Gold

Re: Router login

If you don't have a TACACS or RADIUS but you have a SYSLOG server, use the "archive" commands.

New Member

Re: Router login

754
Views
5
Helpful
5
Replies
CreatePlease to create content