Logging Issue

[damiranz20]

Dear All,

Good Day!

Is there any free tools or command How can I know or Preview the IP address or Computer of the Last Log-on users on my Cisco Router and Cisco Switches.

We are experiencing system error sometimes. or May be some hacker in my Network.

Thanks,

Michael

[kozorezdi]

hi Michael,

I think the best way is limit access to all device only by SSHv.2, remote syslog server (in the log you will see all events) and use AAA on TACACS+.  With TACACS you will be able even log all commands issued on a device.

BTW: TACACS if free, SYSLOG on UNIX as well.  Syslog for Win is Kiwi from SolarWinds.

--

Dmitry

[Ankur Arora · Accepted solution]

Hi Michael,

The below might help you:

https://learningnetwork.cisco.com/thread/12555

Thanks

Ankur

[kozorezdi]

Hi Ankur,

really good link!  Exellent idea!  Many thanks to you and Keith Barker.

--

Dmitry

[damiranz20]

My Cisco Routers and Switches are as follows:

#	Name of Device & Model
1	Cisco 2911 - Router
2	Cisco 2811 - Router
3	Cisco Catalyst 3750 V2 POE - 24 Ports
4	Cisco Core Switch 6506 - E

Is this compatible? and the telnet - Username and password is already configured.

So what will be the confiuration I will add? Thanks for speedy reply.