keeping track of command entered by user login

[mdgregg]

1. In out network, I have several 7206VXR routers at certain strategic nodes within the network. A select group of engineers are allowed to make configuration changes. There are another 800 network devices which use the TACACs server for secure login. The server is not capable of recording all configuration changes throughout the network.

2. Is there a AAA accounting command which would allow the configuration changes made by the user to be retained in a file on the router where the changes were made?

[gfullage]

No. Command accounting is only done to a TACACS server.

Why don't you just configure command accounting on the several 7206VXR's and send those to your TACACS server, and don't configure any command accounting on the other 800 network devices. Just because they use the TACACS server for authentication does't mean they have to do accounting as well.