Logging Failed telnet access on MARS

Unanswered Question
Apr 20th, 2010

Hello!

How can i log failed telnet acccess on router (old IOS no enhanced login)

I try

logging trap debugging (informational also)

logging MARS IP

snmp-server enable traps tty syslog

snmp-server host IPOF MARS

and  I add router in MARS

but I just get some SNMP messages like serial link down....

REGARDS

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Panos Kampanakis Tue, 04/20/2010 - 10:37

aaa authentication and accounting are your options in order to see login attempts.

I hope it helps.

PK

fisko Wed, 04/21/2010 - 00:03

Well I dont want any tacas or radius authentication

I just have few local users..... and want to have alert on dictionary based attack......

Regards

fisko Wed, 04/21/2010 - 00:23

I try to add

aaa new-model
aaa authentication login default local

And on vty 0 4 i put login local

logging on

logging MARS IP

logging trap debuging

snmp-server host MARS IP

snmp-server enable traps authentication syslog.....

ADD router to MARS

still dont have any log in raw messages.....

REGARDS

Actions

This Discussion