nanog mailing list archives

Re: [Activity logging & archiving tool]


From: "Alexei Roudnev" <alex () relcom net>
Date: Tue, 25 Nov 2003 22:34:08 -0800


It is excellent, but _too late. Such features are useless, if you do not
have them on all devices, and no one can update all network gear to this new
version at once. So, it will be useful in 2 - 3 years -:).

----- Original Message ----- 
From: "Terry Baranski" <tbaranski () mail com>
To: "'Christopher L. Morrow'" <chris () UU NET>; "'Scott McGrath'"
<mcgrath () fas harvard edu>
Cc: <nanog () merit edu>
Sent: Tuesday, November 25, 2003 7:03 PM
Subject: RE: [Activity logging & archiving tool]



I'm fairly certain that the tacacs standard implementations
available on the cisco routers log out changes to the config
made by users... That and a little log parsing magic and you
have this data also.

While we're being Cisco-centric, 12.3(4)T has a new feature by which the
router can keep a configuration audit log:
http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_
guide09186a00801d1e81.html

-Terry



Current thread: