[nsp] function of recording cli commands

Oliver Boehmer (oboehmer) oboehmer at cisco.com
Mon Dec 8 05:33:36 EST 2003


> 
> Can anyone please tell me if it is possible to record all commands
> executed on a cisco router? Sometimes one may want to know what
> commands other administrators have run on a shared cisco.
> 
> I can acheive this by "set system syslog file filename
> interactive-commands info" on a juniper but didn't find out how to do
> it on a cisco. 

You need to configure command accounting and send the data to a Tac+
server:

aaa new-model
aaa accounting commands 0 default stop-only group tacacs+
aaa accounting commands 15 default stop-only group tacacs+
!
tacacs-server host 5.5.5.5 key Secret

	oli



More information about the cisco-nsp mailing list