local logging on pix 501 and catalyst 4503

[rhopkins_nci]

is there a way to enable and view logging locally on the pix 501 and catalyst 4503, since I dont have a syslog service yet? I mainly want to see success and failure of logons or logins on the console, ssh, and telnet. If you can point me to some guides or list the steps/commands, I would appreciate it. Thanks in advance.

[mohammedmahmoud]

Hi,

As for the catalyst please issue "set logging buffered" if it is CatOS and "logging buffered" if IOS and use show logging to view the logging.

As for pix use "logging buffered".

HTH,

Mohammed Mahmoud.

[rhopkins_nci]

Just curious, are the logged entries saved in memory or to some file in the cisco devices? Or does it just pop up on the console connection? So, theres no special cmd to log login attempts? Thanks again.

[mohammedmahmoud · Accepted solution]

Hi,

Logging on Cisco devices can be in one of these 4 methods:

1.Console logging - Enabled by default ("logging console" under the global configuration) - The logging will pop-up to the terminal when you are connected via console.

2.Monitor logging - The current terminal line (to the vty (telnet) sessions when "terminal monitor" is enabled - to disable use "terminal no monitor" - Exec mode not configuration mode) - pop-up logging on your screen like in the first method but it is not enabled by default (needs the "terminal monitor").

3.Buffer logging - The router internal logging buffer (use "logging buffered" then "show logging" to display the logs saved in the logging buffer (local RAM Buffer), but the main drawbacks here is the limited size of the buffer (retains only the newest Information) and that the log is lost if the router reloads since it is in the RAM).

4.Syslog logging - The syslog server (use "logging ") the most preferred method, its only drawback is when the connectivity is lost with the syslog server.

HTH,

Mohammed Mahmoud.