cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
496
Views
0
Helpful
4
Replies

how to check who made changes in gateway for E1

Dear All,

I have a question. Kindly help me on this.

if someone had logged in to gateway (E1)  and made changes in gateway, how to identify the person

4 Replies 4

Manish Gogna
Cisco Employee
Cisco Employee

Hi,

Depending on the router model you can enable Router Security audit logs as explained in one of the links below

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_rout_audit_logs_support_TSD_Island_of_Content_Chapter.html

Manish

- Do rate helpful posts -

Deepak Kumar
VIP Alumni
VIP Alumni

Hi,

Best and reliable solution is that you check Syslog of your router. Here, you can check that which user logged in and make a change or not?

Regards,

Deepak Kumar

Regards,
Deepak Kumar,
Don't forget to vote and accept the solution if this comment will help you!

Hello,

in addition to the other responses, if you are lucky and the person that made the change was the LAST person to make any changes, check for the lines below in 'show version':

! Last configuration change at 11:12:45 CEST Tue Sep 13 2016 by CGOY

! NVRAM config last updated at 11:12:45 CEST Tue Sep 13 2016 by CGOY

Mark Malone
VIP Alumni
VIP Alumni

You can also setup configuration change notification on the device to allow to see who mades changes and when , its available in ios and ios-xe

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/config-mgmt/configuration/xe-3s/config-mgmt-xe-3s-book/cm-config-logger.html

Review Cisco Networking for a $25 gift card