Send router Logons to SysLog server?

whiteford · ‎10-14-2007

I want any wr mems or telnet Logons to be logged to my SysLog server from my Cisco 877 and 1841 routers, is this possible?

Richard Burts · ‎10-14-2007

Andy

It is possible to send records to AAA accounting for level 15 commands. So if you are using AAA you could use the accounting facility to get write mem etc. I am not aware of any way to just send these to syslog.

There is a way to send telnet logins to syslog. It is a pretty new feature so you need to be running recent code to be able to do it. This link discusses the enhancements to login including the ability to send messages to syslog for successful login or for not successful login:

http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a0080455b93.html#wp1027195

HTH

Rick

HTH

Rick

whiteford · ‎10-14-2007

Hi, is aaa accounting ssh and radius logins? I just want to get some auditting put on the routers. I will look at this link.

Thanks

guruprasadr · ‎10-14-2007

HI Rick,

Have rated your POST and its very Helpful

Its interesting to know, how do you keep track of the Recent Features and Technologies ? ?

Best Regards,

Guru Prasad R

whiteford · ‎10-15-2007

He's always a great help with detailed replies, even if the questions (like mine) are simple.

santhosh.mc · ‎10-15-2007

Hi Whiteford,

you can send logins attempted messages to syslog server by enabling the following command

"login on-success log [every login ]"

There is another command to track failed login attempts

" login on-failure log"

This feature is available for ios 12.3(4)T and above

Do let me know if these details have been helpful

Best wishes

Santhosh M.C

Cable&Wireless