You could wait until it reboots again (if you're aware of exactly when it
occurs) and then telnet in yourself if see if he's using the console port.
If so, send him a message via telnet to get the heck off of there. Catching
him in the act would probably be a good deterrent. I believe the command is
"send <line #>" to send a message. This all is assuming that he's not
changing the vty passwords while he's in there.
Good luck!
John Neiberger, CCNA/CCDA
> Greetings,
>
> I've a 7000 router in a remote location and it seems
> the local admin hacking in by using the power outage
> excuse. He changes the password by rebooting the
> router and peeks around. I'm trying to catch him in
> the act or log his activities, any ideas?????
>
> Thanks,
>
> Nabil
>
> ___________________________________
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
_______________________________________________________
Get 100% FREE Internet Access powered by Excite
Visit http://freelane.excite.com/freeisp
___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
