I've just started to explore the excellent system with the archive function in Cisco switches, and my setup looks like this:
logging size 500
And when using telnet to control the switch it works perfect. Every change I make to the switch is sent to the syslog together with my login name, like this:
05-04-2007 09:31:27 Local7.Notice 10.10.27.1 781: May 4 09:31:23: %PARSER-5-CFGLOG_LOGGEDCMD: User:og4 logged command:log config
But when logging in via Cisco Network Assistant (CNA), the user name is not displayed, like this:
05-04-2007 09:16:30 Local7.Notice 10.10.27.1 779: May 4 09:16:26: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user logged command:no switchport nonegotiate.
This of course undermines the whole idea of logging who did what.
Is this a bug or just something i forgot to configure?
I use radius to authenticate by the way, and that works perfect with both telnet and CNA.
Funny thing is, when using the command login on-success log, it is the other way around;
When using CNA the successfully logged in user is displayed, but when using telnet, no user name comes up, like this:
05-04-2007 10:07:24 Local7.Notice 10.10.27.1 800: May 4 10:07:20: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: ] [Source: 10.50.50.240] [localport: 23] at 10:07:20 CET Fri May 4 2007
05-04-2007 10:07:04 Local7.Notice 10.10.27.1 799: May 4 10:06:59: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: og4] [Source: 10.50.50.240] [localport: 80] at 10:06:59 CET Fri May 4 2007