Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

syslogs for new remote access connections

Hi all, soes anyone know the message ID for syslog, that is created when someone connects remotley to my asa using vpn client?

cheers

1 REPLY

Re: syslogs for new remote access connections

There are several - for Ipsec Cisco VPN Clien look into these

Ipsec phase 1-2 related

Syslog 713120

Syslog 713119

syslog 713049

RA user related

syslog ID: 113015 user authentication Rejected : reason = Invalid password : local database : user =

Syslog: ID 713184 Group = ciscovpn_ra_access, Username = IP = , Client Type: WinNT Client Application Version: 4.8.00.0440

Syslog: ID 113012 AAA user authentication Successful : local database : user = username

You could watch the ASDM real time log and look at the syslog IDs to spot the ones you want or check teh syslog IDs

bellow in the link.

http://www.cisco.com/en/US/docs/security/asa/asa80/system/message/syslog.html

Regards

340
Views
0
Helpful
1
Replies
CreatePlease to create content