SNMP trap on logout from router

[gcyeaw]

Whenever a user logs out from a telnet session the router sends an SNMP trap. Is there a way to disable this trap? (2651, 3660, 7204)

[rmushtaq]

The traps that are sent from a router to a particular host is controlled by the statement

snmp-server host a.b.c.d xxxx tty frame-relay config snmp ...

To disable the tcpConnectClose traps that are sent when a telnet session is terminated from being sent, remove this statement and readd it excluding the keyword tty from the list of trap families at the tail of the 'snmp-server host' statement (note: if no trap families are specified at the tail of this statement, all traps are sent by default)

[milan.kulik]

Hi,

on the contrary, I'd like to know WHO has logged out from my router or switch.

But the tsLineUser field (#6) in the SNMP trap is always empty.

Is there any way how to recognize the user logged out?

Regards,

Milan

[rmushtaq]

For this Cisco Secure ACS (TACACS+) would be better.

[gcyeaw]

Thank you for sending me off in the right direction. Once I began reading up on the snmp-server host command I realized I could disable the tty messages by entering 'no snmp-server enable traps tty', which solved my problem. The statement remains visable in the config, so it survives a reload.

Thank you again.