04-20-2010 07:00 AM - edited 02-21-2020 03:56 AM
Hello!
How can i log failed telnet acccess on router (old IOS no enhanced login)
I try
logging trap debugging (informational also)
logging MARS IP
snmp-server enable traps tty syslog
snmp-server host IPOF MARS
and I add router in MARS
but I just get some SNMP messages like serial link down....
REGARDS
04-20-2010 10:37 AM
aaa authentication and accounting are your options in order to see login attempts.
I hope it helps.
PK
04-21-2010 12:03 AM
Well I dont want any tacas or radius authentication
I just have few local users..... and want to have alert on dictionary based attack......
Regards
04-21-2010 12:23 AM
I try to add
aaa new-model
aaa authentication login default local
And on vty 0 4 i put login local
logging on
logging MARS IP
logging trap debuging
snmp-server host MARS IP
snmp-server enable traps authentication syslog.....
ADD router to MARS
still dont have any log in raw messages.....
REGARDS
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide