cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
803
Views
0
Helpful
3
Replies

How to log Success Login Attempt to NCS 5501 into Syslog?

is2019
Level 1
Level 1

Cisco NCS 5501 to log to syslog all successful and failed login attempts to the NCS via any interface? I'd like to get as much verbose information about the login attempts (success and failed) as possible,possible including source ip address, userid attempted, etc. Any suggestions would be greatly appreciated

1 Accepted Solution

Accepted Solutions

Then you are already doing this. ISE will log all login attempts to the switch if TACACS+ is properly configured with local fallback only when the TACACS+ server is down.

View solution in original post

3 Replies 3

This is an IOS-XR platform so my personal knowledge here is limited.  Are you performing Device Administration authentication with TACACS+ or RADIUS to ISE?

The Device Administration authentication is with TACACS+ to ISE

Regards

Then you are already doing this. ISE will log all login attempts to the switch if TACACS+ is properly configured with local fallback only when the TACACS+ server is down.