Accounting information is what you're asking for. That is only sent to AAA servers - either TACACS or RADIUS (such as the ACS product from Cisco as Joe mentioned).
Although.... Joe, couldn't he use EEM to create a job on the device to package an accounting event into a syslog event? Probably way more than necessary for this scope of requirement and limited in platform/IOS support as well.
Generally, Ciscoworks can receive sylog messages and SNMP traps (information coming from device based on device action) and poll for SNMP event or MIB values.
Config changes do generate a syslog event so you could see that in CiscoWorks RME's syslog analyzer and even write a custom report to pull out that sort of event specifically.
Yes, you could configure the following on the device:
login on-failure log
login on-success log
Then, every time someone tries to login or does login, the device will send a syslog message which can be analyzed by RME. You can then run an RME syslog report under RME > Reports > Report Generator > Syslog > Standard Report to see those messages.
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...