Lan2lan and user authentication

[gaban]

We have a 3015 and set up L2L with a partner. Is there a way to see who on the other end is logged in and using the connection.

The only thing I can see is that the tunnel is UP but do not know who on the other end is logged on. Is there a way to do this.

[mostiguy]

Out of the box, most IPSec tunnels don't have any authentication to use them - whatever ip address is allowed to make a connection through the tunnel can do so. Cisco does have some proprietary features to allow some auth before using the tunnel.

[patrick.cannon]

Use syslog. Then configure rules on your syslog server to forward an alert to a "who's logged on" mailbox when someone logs onto a resource locally. Or you could just have it write those logons to a seperate file (kiwi syslog supports this) and refer to it as necessary.

You could also serve up those log files on a webserver so you could just check a webpage to see who is on.