06-24-2008 01:35 AM - edited 03-09-2019 08:57 PM
Hello,
I am using router 1812
1) How can I find what commands have been entered on a router?
2) How can I log all these commands to a file / syslog?
3) How can I find, let's say, the last 10 login attempts?
thank u
Solved! Go to Solution.
06-24-2008 04:08 AM
Hi,
1.)Enter the command show history
2.)configure logging x.x.x.x where x= IP-Addr. of your file / or syslog server
3.)configure logging userinfo, where the user has than to change his Login from disable to enable Modus.
06-24-2008 06:55 AM
Consider the following:
To enable logging of user information, and the counting of various types of syslog messages:
logging count
logging userinfo
Note: Use "show logging count" to derive benefit of "logging count".
To regulate and log user logins (failed and successful):
login block-for 120 attempts 4 within 120
login on-failure log
login on-success log
To log configuration changes via syslog:
archive
log config
logging enable
notify syslog
hidekeys
Edit: For some reason the post is displayed differently than I pasted it. The four commands under "archive" are sub commands and should be shown as indented.
logging origin-id hostname
logging source-interface
logging
06-24-2008 04:08 AM
Hi,
1.)Enter the command show history
2.)configure logging x.x.x.x where x= IP-Addr. of your file / or syslog server
3.)configure logging userinfo, where the user has than to change his Login from disable to enable Modus.
07-03-2008 11:40 PM
boath answers helped me a lot...
I have another question...
sh history - shows me the commands entered, but if I logout and then login , history is empty; can I do something about that, like in linux, the history file keeps your commnads there even if u do a relogin. I hope u understand what I want to say.
thanku again
06-24-2008 06:55 AM
Consider the following:
To enable logging of user information, and the counting of various types of syslog messages:
logging count
logging userinfo
Note: Use "show logging count" to derive benefit of "logging count".
To regulate and log user logins (failed and successful):
login block-for 120 attempts 4 within 120
login on-failure log
login on-success log
To log configuration changes via syslog:
archive
log config
logging enable
notify syslog
hidekeys
Edit: For some reason the post is displayed differently than I pasted it. The four commands under "archive" are sub commands and should be shown as indented.
logging origin-id hostname
logging source-interface
logging
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: