SYSLOG

Answered Question
Oct 6th, 2009

Hi,

I can't see in the syslog when a user accesses a Cisco 6509 (12.2 (17r) S4). This is the configuration that I used.

logging xxx.xxx.xxx.xxx

logging xxx.xxx.xxx.xxx

logging trap informational

logging facility local6

logging source-interface Vlan99

logging on

Someone can help me?

Regards

I have this problem too.
0 votes
Correct Answer by yjdabear about 7 years 3 months ago

It's an enhancement in IOS 12.3(4)T and later:

login on-failure log

login on-success log

with pre-requisite of "login block-for seconds attempts tries within seconds"

Otherwise, you need to look at the logs of your AAA backend.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
yjdabear Tue, 10/06/2009 - 08:06

It's an enhancement in IOS 12.3(4)T and later:

login on-failure log

login on-success log

with pre-requisite of "login block-for seconds attempts tries within seconds"

Otherwise, you need to look at the logs of your AAA backend.

emiliobalmon Tue, 10/06/2009 - 22:41

Hi,

it works correctly. Now I can see from what address logged and if the authentication was correct or incorrect.

It seems strange that i can not see that user is authenticated. Is there any way to do this?

Thanks a lot

Actions

This Discussion