authentication failure traps/logs/anything?

[dadeyoung]

googled for information related to this. I found conversations along the lines of using IDS and whatnot.

Isn't there someway to log/trap auth failures? Sniffing is great for telnet, but what about ssh?

Tell me this has not been overlooked.

[whitesnake1965]

do you got an answer, I'm very interested. Here is my part of the solution:

security authentication failure rate 2 log

security passwords min-length 6

snmp-server enable traps snmp authentication

logging console critical

with this solution you got an snmp-trap for the login but not for the enabe login.