router log

[bkayyali]

i want to set up a syslog server which will have all the logs(telnet, ftp...and other protocols into my 3660 cisco router).so that i can see who log or try to log into my router.i need the commands that can help me to do the log-configuration .

also any one can suggest a free and effeint syslog server software so that i install it.

[Gilles Dufour]

1/ send log messages to a syslog server.

The command is 'logging x.x.x.x' where x.x.x.x is the address of the server

2/ specify what level of logging

'logging trap [0-7]'

3/ Tell the router to generate error/informational messages.

Router normally logs only error messages. We don't log anything regarding telnet or ftp.

You can define an ACL with the keyword 'log' at the end of the lines that should generate a message.

But you don't want to log everything.

ie: you could do an acl that permit a series of hosts to telnet to the router and deny the rest.

acc 101 permit tcp host x.x.x.x host r.r.r.r eq 23

acc 101 deny tcp any host r.r.r.r eq 23 log

^^^^

You can then apply this ACL on your outside/insecure interface.

Regarding syslog server, the easy and free solution is linux.

[robertgile]

www.winsyslog.com

They are out of Germany and it is only like $50. It runs on NT/2000/XP.