配置cisco设备记录用户命令
R1(config)# aaa new-model
R1(config)# aaa accounting commands 0 default start-stop group local
R1(config)# aaa accounting commands 1 default start-stop group local
R1(config)# aaa accounting commands 15 default start-stop group local
R1(config)# line vty 0 4
R1(config-line)# accounting commands 0 default
R1(config-line)# accounting commands 1 default
R1(config-line)# accounting commands 15 default
R1(config-line)#exit
R1(config)#line vty 5 15
R1(config-line)# accounting commands 0 default
R1(config-line)# accounting commands 1 default
R1(config-line)# accounting commands 15 default
R1(config-line)#exit
===============================================================================
Enter configuration commands, one per line. End with CNTL/Z.
Router1(config)#aaa new-model
Router1(config)#aaa accounting exec default start-stop group local
Router1(config)#aaa accounting connection default start-stop group local
Router1(config)#aaa accounting system default stop-only group local
注释 除了可以记录用户输入命令以外还提供了
exec(用户开始和中止exec 会话的时间记录),
connection(用户发起外部连接的时间,地址,数据包多少等信息记录比如telnet ssh 等)
system(系统重启,禁用AAA 等系统信息)等三种系统事件的记录