Logging Issue

Answered Question
Jan 30th, 2014
User Badges:

Dear All,


Good Day!


Is there any free tools or command How can I know or Preview the IP address or Computer of the Last Log-on users on my Cisco Router and Cisco Switches.

We are experiencing system error sometimes. or May be some hacker in my Network.


Thanks,

Michael

Correct Answer by Ankur Arora about 3 years 6 months ago

Hi Michael,


The below might help you:


https://learningnetwork.cisco.com/thread/12555


Thanks

Ankur

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
kozorezdi Thu, 01/30/2014 - 01:33
User Badges:

hi Michael,


I think the best way is limit access to all device only by SSHv.2, remote syslog server (in the log you will see all events) and use AAA on TACACS+.  With TACACS you will be able even log all commands issued on a device.


BTW: TACACS if free, SYSLOG on UNIX as well.  Syslog for Win is Kiwi from SolarWinds.


--

Dmitry

kozorezdi Thu, 01/30/2014 - 01:58
User Badges:

Hi Ankur,


really good link!  Exellent idea!  Many thanks to you and Keith Barker.


--

Dmitry

damiranz20 Thu, 01/30/2014 - 02:03
User Badges:

My Cisco Routers and Switches are as follows:


#

Name of Device & Model

1

Cisco 2911 - Router

2

Cisco 2811 - Router

3

Cisco Catalyst 3750 V2 POE - 24 Ports

4

Cisco Core Switch 6506 - E



Is this compatible? and the telnet - Username and password is already configured.


So what will be the confiuration I will add? Thanks for speedy reply.

Actions

This Discussion