topic Re: Is it possible to log CLI without tacacs? in Network Access Control https://community.cisco.com/t5/network-access-control/is-it-possible-to-log-cli-without-tacacs/m-p/964609#M407403 <HTML><HEAD></HEAD><BODY><P>archive</P><P> log config</P><P> logging enable</P><P> notify syslog</P><P> hidekeys</P></BODY></HTML> Sun, 16 Mar 2008 23:29:00 GMT cisco24x7 2008-03-16T23:29:00Z Is it possible to log CLI without tacacs? https://community.cisco.com/t5/network-access-control/is-it-possible-to-log-cli-without-tacacs/m-p/964607#M407401 <P>I am curious to know if it is possible to log user command line actions on Cisco devices, without having a tacacs server.</P> Sun, 10 Mar 2019 22:43:38 GMT https://community.cisco.com/t5/network-access-control/is-it-possible-to-log-cli-without-tacacs/m-p/964607#M407401 Jason Fraioli 2019-03-10T22:43:38Z Re: Is it possible to log CLI without tacacs? https://community.cisco.com/t5/network-access-control/is-it-possible-to-log-cli-without-tacacs/m-p/964608#M407402 <HTML><HEAD></HEAD><BODY><P>yes, starting with IOS version either 12.3 or </P><P>12.3T, you can log user command via syslog.</P><P></P><P>I implemented this feature on my production</P><P>router with IOS 12.4(16) IP Advanced services</P><P></P><P>I will post the configuration for you tomorrow.</P><P></P><P>CCIE Security</P></BODY></HTML> Sun, 16 Mar 2008 20:50:24 GMT https://community.cisco.com/t5/network-access-control/is-it-possible-to-log-cli-without-tacacs/m-p/964608#M407402 cisco24x7 2008-03-16T20:50:24Z Re: Is it possible to log CLI without tacacs? https://community.cisco.com/t5/network-access-control/is-it-possible-to-log-cli-without-tacacs/m-p/964609#M407403 <HTML><HEAD></HEAD><BODY><P>archive</P><P> log config</P><P> logging enable</P><P> notify syslog</P><P> hidekeys</P></BODY></HTML> Sun, 16 Mar 2008 23:29:00 GMT https://community.cisco.com/t5/network-access-control/is-it-possible-to-log-cli-without-tacacs/m-p/964609#M407403 cisco24x7 2008-03-16T23:29:00Z Re: Is it possible to log CLI without tacacs? https://community.cisco.com/t5/network-access-control/is-it-possible-to-log-cli-without-tacacs/m-p/964610#M407404 <HTML><HEAD></HEAD><BODY><P>Fantastic! Thanks so much.</P><P></P><P>Edit. Does this functionality require advanced IP services, or will this work on IP services with crypto?</P></BODY></HTML> Mon, 17 Mar 2008 00:49:54 GMT https://community.cisco.com/t5/network-access-control/is-it-possible-to-log-cli-without-tacacs/m-p/964610#M407404 Jason Fraioli 2008-03-17T00:49:54Z Re: Is it possible to log CLI without tacacs? https://community.cisco.com/t5/network-access-control/is-it-possible-to-log-cli-without-tacacs/m-p/964611#M407405 <HTML><HEAD></HEAD><BODY><P>One last question pertaining to logging. Is there a way to limit the interfaces UP/DOWN informationals being syslogged? In Kiwi Syslog the interface informational messages show up as Level7.Notice for the protocol and Level7.Error for the link. Is there a way to just filter out the link/protocol informationals and allow all others?</P><P></P><P>Thanks in advance</P></BODY></HTML> Mon, 17 Mar 2008 12:57:15 GMT https://community.cisco.com/t5/network-access-control/is-it-possible-to-log-cli-without-tacacs/m-p/964611#M407405 Jason Fraioli 2008-03-17T12:57:15Z Re: Is it possible to log CLI without tacacs? https://community.cisco.com/t5/network-access-control/is-it-possible-to-log-cli-without-tacacs/m-p/964612#M407406 <HTML><HEAD></HEAD><BODY><P>For more detailed information on the <B>archive</B> command.</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/ios/12_3t/12_3t4/feature/guide/gtconlog.html" target="_blank">http://www.cisco.com/en/US/docs/ios/12_3t/12_3t4/feature/guide/gtconlog.html</A></P><P></P></BODY></HTML> Mon, 17 Mar 2008 13:00:24 GMT https://community.cisco.com/t5/network-access-control/is-it-possible-to-log-cli-without-tacacs/m-p/964612#M407406 Collin Clark 2008-03-17T13:00:24Z