To trace access processes, you can specify options in the traceoptions statement at the [edit access] hierarchy level. The default tracing behavior is the following:
You cannot change the directory (/var/log) in which trace files are located. However, you can customize the other trace file settings by including the following statements at the [edit access traceoptions] hierarchy level:
- [edit access]
-
traceoptions {
-
- file filename {
- files number;
- size maximum-file-size;
- world-readable | no-world-readable;
- match regex;
- }
- flag all;
- flag authentication;
- flag chap;
- flag configuration;
- flag kernel;
- flag radius;
- }
These options are described in the following sections: