Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

MARS

I'm trying to setup MARS so it can alert me when failed attemps to our cisco switches 3750. Is it possible to do it? I have configured my switches with the commands required to log, but I don't see any logs for this failed attemps.

Any idea how can I complete this task?

3 REPLIES
New Member

Re: MARS

What exactly do you mean by "failed attempts"? Is it failed NAC authentication or failed telnet/SSH access you're looking for?

An example of telnet access logging alerts would be to setup the switches to syslog debug to the MARS and then create a rule on the MARS to look for these messages.

/Fredrik

New Member

Re: MARS

I'm trying to log any telnet/ssh failed access made to our switches.

Let me see if I understood. I need to turn on AAA authentication and then create a rule on MARS?

Bronze

Re: MARS

I have a write-up on my blog about how you can achieve this. You can find it at:

http://cs-mars.blogspot.com/2006/09/cs-mars-rule-ios-login-auditing.html

LMK if this helps.

-Mike

http://cs-mars.blogspot.com

112
Views
0
Helpful
3
Replies
CreatePlease login to create content