Solved: Logging Issue

damiranz20 · ‎01-30-2014

Dear All,

Good Day!

Is there any free tools or command How can I know or Preview the IP address or Computer of the Last Log-on users on my Cisco Router and Cisco Switches.

We are experiencing system error sometimes. or May be some hacker in my Network.

Thanks,

Michael

Ankur Arora · ‎01-30-2014

Hi Michael,

The below might help you:

https://learningnetwork.cisco.com/thread/12555

Thanks

Ankur

View solution in original post

kozorezdi · ‎01-30-2014

hi Michael,

I think the best way is limit access to all device only by SSHv.2, remote syslog server (in the log you will see all events) and use AAA on TACACS+. With TACACS you will be able even log all commands issued on a device.

BTW: TACACS if free, SYSLOG on UNIX as well. Syslog for Win is Kiwi from SolarWinds.

--

Dmitry

Ankur Arora · ‎01-30-2014

Hi Michael,

The below might help you:

https://learningnetwork.cisco.com/thread/12555

Thanks

Ankur

kozorezdi · ‎01-30-2014

Hi Ankur,

really good link! Exellent idea! Many thanks to you and Keith Barker.

--

Dmitry

damiranz20 · ‎01-30-2014

My Cisco Routers and Switches are as follows:

#	Name of Device & Model
1	Cisco 2911 - Router
2	Cisco 2811 - Router
3	Cisco Catalyst 3750 V2 POE - 24 Ports
4	Cisco Core Switch 6506 - E

Is this compatible? and the telnet - Username and password is already configured.

So what will be the confiuration I will add? Thanks for speedy reply.