04-20-2010 07:00 AM - edited 02-21-2020 03:56 AM
Hello!
How can i log failed telnet acccess on router (old IOS no enhanced login)
I try
logging trap debugging (informational also)
logging MARS IP
snmp-server enable traps tty syslog
snmp-server host IPOF MARS
and I add router in MARS
but I just get some SNMP messages like serial link down....
REGARDS
04-20-2010 10:37 AM
aaa authentication and accounting are your options in order to see login attempts.
I hope it helps.
PK
04-21-2010 12:03 AM
Well I dont want any tacas or radius authentication
I just have few local users..... and want to have alert on dictionary based attack......
Regards
04-21-2010 12:23 AM
I try to add
aaa new-model
aaa authentication login default local
And on vty 0 4 i put login local
logging on
logging MARS IP
logging trap debuging
snmp-server host MARS IP
snmp-server enable traps authentication syslog.....
ADD router to MARS
still dont have any log in raw messages.....
REGARDS
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: