Solved: Re: SYSLOG

emiliobalmon · ‎10-06-2009

Hi,

I can't see in the syslog when a user accesses a Cisco 6509 (12.2 (17r) S4). This is the configuration that I used.

logging xxx.xxx.xxx.xxx

logging trap informational

logging facility local6

logging source-interface Vlan99

logging on

Someone can help me?

Regards

yjdabear · ‎10-06-2009

It's an enhancement in IOS 12.3(4)T and later:

login on-failure log

login on-success log

with pre-requisite of "login block-for seconds attempts tries within seconds"

Otherwise, you need to look at the logs of your AAA backend.

yjdabear · ‎10-06-2009

It's an enhancement in IOS 12.3(4)T and later:

login on-failure log

login on-success log

with pre-requisite of "login block-for seconds attempts tries within seconds"

Otherwise, you need to look at the logs of your AAA backend.

emiliobalmon · ‎10-06-2009

Hi,

it works correctly. Now I can see from what address logged and if the authentication was correct or incorrect.

It seems strange that i can not see that user is authenticated. Is there any way to do this?

Thanks a lot