cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
730
Views
0
Helpful
2
Replies

Cisco IOS XR platform command to track commands executed by users

Hi all,

 

Thanks in advance.

 

I am using both XE and XR IOS routers. when I executed below commands in XE, I am able to track commands executed by users through syslog.  But the same is not working in XR IOS router.  Please guide me with equivalent commands for XR.

 

#archive

#log config

#logging enable

#notify syslog

 

Or else you can suggest me some alternate options to keep a track of executed commands in router.

 

Regards,

Vignesh

1 Accepted Solution

Accepted Solutions

johnlloyd_13
Level 9
Level 9

hi,

it's easier to track/check if you're using a RADIUS or TACACS for command accouting.

you can use the combination of show configuration commit list and show configuration rollback changes <COMMIT ID> commands.

see example below:

 

#show configuration commit list

Thu Apr 29 05:10:07.665 UTC

SNo. Label/ID              User      Line                Client      Time Stamp

~~~~ ~~~~~~~~              ~~~~      ~~~~                ~~~~~~      ~~~~~~~~~~

1    1000000156            john     vty1:node0_RP0_CPU  CLI         Thu Apr 29 03:36:09 2021

2    1000000155            john     vty1:node0_RP0_CPU  Rollback    Thu Apr 29 03:31:56 2021

3    1000000154            john     vty0:node0_RP0_CPU  CLI         Tue Apr 27 07:43:13 2021

4    1000000153            john     vty0:node0_RP0_CPU  CLI         Sat Apr 24 14:15:54 2021

 

-----

 

#show configuration rollback changes ?

  last        Changes for rolling back last <n> commits

  to          Changes up to (and including) a specific commit

  to-exclude  Changes up to (and excluding) a specific commit

  1000000154  Commit ID

  1000000153  Commit ID

  1000000152  Commit ID

  1000000151  Commit ID

  1000000150  Commit ID

  1000000149  Commit ID

 

#show configuration rollback changes 1000000154

Thu Apr 29 03:28:48.896 UTC

Building configuration...

!! IOS XR Configuration 7.2.2

no ssh server dscp 24

View solution in original post

2 Replies 2

johnlloyd_13
Level 9
Level 9

hi,

it's easier to track/check if you're using a RADIUS or TACACS for command accouting.

you can use the combination of show configuration commit list and show configuration rollback changes <COMMIT ID> commands.

see example below:

 

#show configuration commit list

Thu Apr 29 05:10:07.665 UTC

SNo. Label/ID              User      Line                Client      Time Stamp

~~~~ ~~~~~~~~              ~~~~      ~~~~                ~~~~~~      ~~~~~~~~~~

1    1000000156            john     vty1:node0_RP0_CPU  CLI         Thu Apr 29 03:36:09 2021

2    1000000155            john     vty1:node0_RP0_CPU  Rollback    Thu Apr 29 03:31:56 2021

3    1000000154            john     vty0:node0_RP0_CPU  CLI         Tue Apr 27 07:43:13 2021

4    1000000153            john     vty0:node0_RP0_CPU  CLI         Sat Apr 24 14:15:54 2021

 

-----

 

#show configuration rollback changes ?

  last        Changes for rolling back last <n> commits

  to          Changes up to (and including) a specific commit

  to-exclude  Changes up to (and excluding) a specific commit

  1000000154  Commit ID

  1000000153  Commit ID

  1000000152  Commit ID

  1000000151  Commit ID

  1000000150  Commit ID

  1000000149  Commit ID

 

#show configuration rollback changes 1000000154

Thu Apr 29 03:28:48.896 UTC

Building configuration...

!! IOS XR Configuration 7.2.2

no ssh server dscp 24

Thanks John

Review Cisco Networking for a $25 gift card