WLC to Syslog

[teymur azimov]

We want  to send information on Client Properties page on WLAN Controller to SYSLOG Server. I mean we want to send information about wireless client (IP addres, username e. t. c.) to SYSLOG Server. How we can do this? Which configuration we need to do ?

please help us.

Mazkador Rafail.

[Scott Fella]

You are limited to the types of logs you can send to your syslog.  That information about a device connection is not part of a syslog message.  You might only get to see the username if your using 802.1x.

[teymur azimov]

yes, we are using 802.1x

We have these configuration on WLC:

Syslog level: debugging

Sysylog facility:  local use 5

we couldn't see any information on syslog.

but when we run debug dhcp packet on WLC, then we could see the IP address of user which connected, but no username

what you recommend us to do?

[Scott Fella]

Well running a debug of course will get you more info regarding the device, but syslog will not get you that information.  Since you are doing 802.1x, maybe you should look at doing some accounting on the radius and reviewing that report.  Radius might provide you with more information, since the devices have to authenticat to radius.

[teymur azimov]

yes, devices are authenticating to radius, but on radius we also couldn't see information about  ip address of client who connected, we can only see username

we need information about connected user: username and ip address

is there any way to get this information as a log ?

[Stephen Rodriguez]

Depending on what you are looking to do, you could write a script to call the WLC and pull a show client detailed to pull the Ip address. You really need a double script one to pull the show client summary, drop that to a file, grep the output to get the Mac address, the the details to get the IP.

But as a log, not that I'm aware of

Steve

Sent from Cisco Technical Support iPad App

[Scott Fella]

Well you can try to enable debugging on the WLC (only debug what you have to) and then set the syslog level to debugging, but becareful not to debug everything.  That might get you the info, but I dont' know.

[teymur azimov]

when connecting with browser to WLC, in client properties we can see both, ip address and username of client which connected on that moment, could we send this information somewhere as log?

dear Stephen,

what kind of scripts we should write and where? can you please help us with scripts?

[Stephen Rodriguez]

you can do expect scripts, below is an example that another forum member wrote.

https://supportforums.cisco.com/thread/2103313

In the first part where the send is, you would change that to show client summary. From there I can't help too much as I'm not a scripting guy.

Steve

Sent from Cisco Technical Support iPad App

[teymur azimov]

Hi,

when we run debug aaa all enable on wlc controller, then we can view ip address and user id on controller itself and also on syslog server. But when we reconnect on wlc controller then we coudln'e see anything on controller and on syslog server.

question is, is there any way to view ip address and user id without running debug command?

if yes, how we can do? if no, then how can we keep debugging on controller even if we reconnect on it?

[splashx__]

Hey man.

Did you succeed on getting the information you needed from WLC via syslog (or any other way)?

Dio