topic How to enable DHCPD logging in ASA 5505 in Network Security

How to enable DHCPD logging in ASA 5505

wedzek123 — Mon, 11 Mar 2019 21:10:54 GMT

Hi every one.

I have configured dhcpd in an ASA 5505 and every thing is working. I am testing it to give me a warning when the address pool is about to be finished or it is empty. But don't konw how to do it.

If I run the "debug dhcpd packet", i get that the address pool is empty. Is ther any one there who can help me please.

Thanx, Wedzek

How to enable DHCPD logging in ASA 5505

varrao — Fri, 12 Aug 2011 13:09:31 GMT

Hi Wed,

You can send those debugs to your syslog server as well, if that makes your job easy,

logging debug-trace

logging trap debugging

logging host

HTH,

Varun

How to enable DHCPD logging in ASA 5505

wedzek123 — Fri, 12 Aug 2011 13:18:00 GMT

Hello Varun,

Thank you very much for the reply. I tried that and it worked. The problem with that is it bombards the Syslog server with all the debug messages. In fact you get this warning ( 'logging debug-trace' is enabled. All debug messages are currently being redirected to syslog and will not appear in any monitor session). I also googled a bit in Cisco websites and it is not advisable 'coz debug wastes lot of CPU. I am wondering if there is a better alternative!

Thanx again!

Wed

How to enable DHCPD logging in ASA 5505

varrao — Fri, 12 Aug 2011 16:02:43 GMT

Hi Wed,

I am not sure if you we have any syslog for it, I tried searching for it but could not find any for it. You can check one thing, enable logging at debug level as well as debugs, when you see the ip pool exhausted debug in the syslog server, you can chcek if there was any log as well genarted for it, reference the timestamp. If you find any then, you can send only that syslog to the server by:

logging message

Hope this helps you out.

Thanks,

Varun