Re: [j-nsp] Logging for shell sessions

Wojciech Janiszewski via juniper-nsp <[email protected]> Mon, 8 Jul 2024 22:47:41 +0200
Newsgroups gmane.network.nsp.juniper
Message-ID <CAH7_r2VvGHUd1z88ZFygzYiPDVKvTZuTkaTBhBtBPTEoojQNuw@mail.gmail.com>
Hi Phil,

Seems that it's supported from 23.4

https://apps.juniper.net/feature-explorer/feature-info.html?fKey=11993&fn=Logging%20support%20for%20routing%20engine%20shell%20and%20line%20card%20shell

HTH,
Wojciech

sob., 6 lip 2024, 08:27 użytkownik Phil Mawson via juniper-nsp <
[email protected]> napisał:

> Hi,
>
> Once a user enters the unix shell on a Juniper router/switch (Ie: start
> shell), it appears all standard logging of the commands typed is not
> captured by syslog and obviously not sent to AAA for authorisation.
>
> Is there a way to capture all commands users type and send to an external
> logging source?  Looking through Juniper doc doesn’t have much info on
> this.  I’d expect we’d need something running at the kernel level on BSD.
>
> Understand the commands are logged in the bash history file, but ideally
> need this to go off the router for audit purposes in real time.
>
> Cheers,
> Phil.
> _______________________________________________
> juniper-nsp mailing list [email protected]
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp