Hi,
If you have a Network Management station you can
enable Cold Start Traps to alert you when the router
has been restarted. Logging will not do you any good
if he is powering down the router. I would also
suggest implementing TACACS+. There is a log file that
stores details about every command issued in the
router and also who issued the commands. People like
that really bug me. Good luck
>
> [EMAIL PROTECTED] wrote:
>
> > Greetings,
> >
> > I've a 7000 router in a remote location and it
> seems
> > the local admin hacking in by using the power
> outage
> > excuse. He changes the password by rebooting the
> > router and peeks around. I'm trying to catch him
> in
> > the act or log his activities, any ideas?????
> >
> > Thanks,
> >
> > Nabil
> >
> > ___________________________________
> > UPDATED Posting Guidelines:
> http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to
> [EMAIL PROTECTED]
>
> --
>
>
> > begin:vcard
> n:Sharma;Deepak
> x-mozilla-html:FALSE
> adr:;;;;;;
> version:2.1
> email;internet:[EMAIL PROTECTED]
> title:MCP A+ ACT
> x-mozilla-cpt:;-1
> fn:Deepak Sharma
> end:vcard
>
__________________________________________________
Do You Yahoo!?
Send instant messages with Yahoo! Messenger.
http://im.yahoo.com/
___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]