Enabling accounting for Telnet seesions

[sagia]

Hi all,

how can i enable accounting (monitoring) for all telnet sessions happening on my router. site engineers login to my routers for different reasons, so i need to provide them a user name and password and review the log for their activites on routers.

Can we configure this utility in router IOS..

Regards

Mohamed

[bstremp]

Once you configure usernames/passwords for your users, when they log in to the router either via console or telnet, you will see a message in the log saying "confiuged by..."

You could also set up an access-list that logs all tcp connections on port 23 made to your router. The router will only tell you who accessed the router, it will not log their activities. You can limit the commands your users can enter with the use of privilege levels.

[wkumari]

Hi,

What you are looking for is TACACS+. It will authenticate connections to the routers and log all commands and who did them. The usernames and passwords are stored on a server so managing users is much easier too.

Have a look at this: http://www.cisco.com/en/US/partner/products/sw/iosswrel/ps1835/products_configuration_guide_chapter09186a00800ca7ac.html

-- Warren.