Logging Failed telnet access on MARS

Unanswered Question
Apr 20th, 2010
User Badges:

Hello!


How can i log failed telnet acccess on router (old IOS no enhanced login)


I try


logging trap debugging (informational also)

logging MARS IP

snmp-server enable traps tty syslog

snmp-server host IPOF MARS


and  I add router in MARS


but I just get some SNMP messages like serial link down....



REGARDS

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Panos Kampanakis Tue, 04/20/2010 - 10:37
User Badges:
  • Cisco Employee,

aaa authentication and accounting are your options in order to see login attempts.


I hope it helps.


PK

fisko Wed, 04/21/2010 - 00:03
User Badges:

Well I dont want any tacas or radius authentication


I just have few local users..... and want to have alert on dictionary based attack......


Regards

fisko Wed, 04/21/2010 - 00:23
User Badges:

I try to add


aaa new-model
aaa authentication login default local


And on vty 0 4 i put login local


logging on

logging MARS IP

logging trap debuging


snmp-server host MARS IP

snmp-server enable traps authentication syslog.....


ADD router to MARS


still dont have any log in raw messages.....


REGARDS

Actions

This Discussion