Config change should be seen at Radius

[interfacedy]

Hi, When some config change was made at switch or router, if we want to see the change record, where should we see? in Radius or TACACS ISE? Second question: If just typing command with saving or without saving config, what difference of the two we can see in Radius or TACACS? Thank you

[Rob Ingram]

@interfacedy you would need to use TACACS in order to determine the commands used configuring the switch/router. RADIUS will not provide this information.

If you type the command and don't press enter, nothing is sent to ISE, but if you press enter each command is authorised by TACACS independently. It doesn't matter about saving or not, if you are not authorised by the TACACS server to enter the command you will not be allowed.