topic logging successful authentications in Network Access Control

logging successful authentications

rakakharu — Mon, 11 Mar 2019 00:00:53 GMT

Hi,

I would like to log every successful authentication or authorization or accounting (I don't know which step is more effective.) as follows:

UserID	Assigned IP	Date/Time

Is it possible to do that via syslog ? or how ? (It should work very fast)

Best Regards

dhananjoy chowdhury — Fri, 19 Mar 2010 07:12:04 GMT

If your devices are integrated with Cisco ACS for AAA, just enable logging for successfull authentications on the ACS.

Also on the ACS server you can configure to forward the logs to a syslog server.

rakakharu — Sat, 20 Mar 2010 20:17:17 GMT

thanks a lot,

One more question: I want to log external (real) IPs of subscribers that I authenticated.

Is it possible ?

p.s. I also added the nw structure.

Sorry for my simple questions, I'm newbie

dhananjoy chowdhury — Sun, 21 Mar 2010 04:30:09 GMT

Hi,

The field "Caller-ID" shows the IP address of the end user getting authenticated to the Device (shown as NAS in the TACACS logs).

Its enabled by default. If not you need to add the field under

Logging >> Failed Attempts

Logging >> Passed Authentication

Hope this helps.

~dc~

rakakharu — Sun, 21 Mar 2010 11:32:53 GMT

thanks a lot.

darpotter — Tue, 23 Mar 2010 10:00:13 GMT

If you're interesing in logging why not take a look at extraxi aaa-reports?

We have a variety of log collection tools plus scheduled data import and reporting options - including the ACS database itself.

60 trial versions available too!

Regards

Darran

rakakharu — Tue, 23 Mar 2010 17:54:25 GMT

Thanks Darran, I'm checking it now.