Log all commands done in Privileged or Config mode

[zephyran]

Is there any way on any of the following Catalyst switches to log all commands entered by someone in Privileged and/or Config mode to a syslog server?

4507
3750
2950
2900XL

The only solution I've found requires Event Manager, which none of these switches has. Thanks!

 

[burtsbees]

Try Kiwi syslog server and set an IP on the switch. Kiwi is free.

Burt

 

[zephyran]

I've already got the switches sending their alerts to a Linux syslog server, and that is all working properly. What I'm looking to do is have the switches report all Privileged and Config commands run on them to the syslog server as well. That way we can have an automated record of any changes made to the switches by anyone with Privileged access, and possibly even have their IP address on record for traceability.

 

[burtsbees]

I think this can be achieved through aaa configuration, like the auditing. It has been some time since I have had experience with this, so I would have to research this...

Burt