log any configuration command

[N.ima0102]

Hi

In our network I am looking for solution in order to log any command that has been excuted on cisco devices by every user.

It means, If user A excuted "show run int X/X" this command is to sent to log server or save in one server.

What solution do you suggest for my purpose ?

Thanks in advance

[Richard Burts]

You can configure AAA accounting to send accounting records to report commands that users have entered and then can store the records and can report on the records from your AAA server. I have done this quite often using TACACS and it works pretty well. The configuration statement might look something like this

aaa accounting commands 15 default start-stop group tacacs+

HTH

Rick

[Tagir Temirgaliyev]

Cisco Access Control Server

ACS