How to monitor who loged in and how to give user level access

[omal]

Hi

1) How can I give different user level access?

2) When a user logs in to a router or a switch, can I see what command has he/she has used? Can I get my router or switch to maintain a log of it?

3) How can I monitor who are the unauthorized people who attempted to log in to my router and how many times they attempted.

Your answers on this will be vey valuable.

Thanks in advance!

[Collin Clark]

1) AAA server such as Cisco ACS

http://www.cisco.com/en/US/products/sw/secursw/ps2086/index.html

2) You can log this via AAA too! On some devices you can configure it locally.

http://packetpros.com/wiki/index.php/I_want_to_track_who_makes_changes_in_a_router%2C_but_I_don%27t_have_AAA._What_can_I_do%3F

3) AAA once again

Hope that helps