cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
534
Views
0
Helpful
4
Replies

logging command

amenash123
Level 1
Level 1

i need to know regarding to logging:

i want to see when i do show logging ,who try to connect to my router or who try to connect to my router and make mistake with the password.

is it the command "logging buffered 10000 debugging" and "logging consol"

will be enough or i need another command?

thanks.

4 Replies 4

tarun209
Level 1
Level 1

Hi amenash,

Below link gives you the detailed information abt logging

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/rel_5_4/config/logging.htm

Thanks & Regards

Tarun G

amit-singh
Level 8
Level 8

Hi Amenash,

The logging command is used to display the logs generated by the router depending on the severity and the facility of the logs. This command is not used to check who all users are logged into the router and doing some changes. I think you are understanding the command wrong.

http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_configuration_guide_chapter09186a008030c760.html#wp1001168

To check who all users are accessing the router you can use the command " show users " and it will list you the users who are accessing the router.

To my understanding, you are looking for some thing that will let you know who all logged into your routers and what changes or commands does that user use. You can use TACACS server to administer the access, authorization and accounting on your network.

HTH,

-amit singh

paddyxdoyle
Level 6
Level 6

Hi,

From you router you need to do something like:

rtr(config)# username paddy password paddy

rtr(config)# aaa authentication login default local

rtr(config)# logging buffered debugging

rtr# debug aaa authentication

This will log any connection attempts to the local log on your router and you should be able to decipher who is trying or successfully logging to your router.

The only problem you will encounter is that the logs will wrap eventually thus deleting entries so ideally you need to set up a sylog server and log to this too.

rtr(config)# logging

rtr(config)# logging trap debugging

There is a good document on this site on how to set up a syslog server on a Unix host.

If you haven't got a Unix host you can download free syslog servers for Windows hosts on the web.

HTH

Paddy

i want to thank you , you help me a lot.

just i want to know, can i with the command you send me to see trap too or only logging and if only logging who can i config that i can get the same things i see in the logging to see in the trap.

thanks again.