SYSLOG

Answered Question
Oct 6th, 2009
User Badges:

Hi,


I can't see in the syslog when a user accesses a Cisco 6509 (12.2 (17r) S4). This is the configuration that I used.


logging xxx.xxx.xxx.xxx

logging xxx.xxx.xxx.xxx

logging trap informational

logging facility local6

logging source-interface Vlan99

logging on


Someone can help me?


Regards

Correct Answer by yjdabear about 7 years 7 months ago

It's an enhancement in IOS 12.3(4)T and later:


login on-failure log

login on-success log


with pre-requisite of "login block-for seconds attempts tries within seconds"


Otherwise, you need to look at the logs of your AAA backend.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
yjdabear Tue, 10/06/2009 - 08:06
User Badges:
  • Gold, 750 points or more

It's an enhancement in IOS 12.3(4)T and later:


login on-failure log

login on-success log


with pre-requisite of "login block-for seconds attempts tries within seconds"


Otherwise, you need to look at the logs of your AAA backend.

emiliobalmon Tue, 10/06/2009 - 22:41
User Badges:

Hi,

it works correctly. Now I can see from what address logged and if the authentication was correct or incorrect.


It seems strange that i can not see that user is authenticated. Is there any way to do this?


Thanks a lot

Actions

This Discussion