Syslog messages not working on 2950G

[dbuckley77]

We have a number of 2950G switches on our network that we have set up syslog logging on.  We can see messages coming into the syslog server when interfaces go up or down but cannot see messages for user logins.  We have tried setting logging trap to both notifications and debugging but neither sends traps for user login.  We have 2960's which are all logging user logins.  Need assistance.

[Georg Pauwen]

Hello,

not sure how your logging is configured, but try the below:

2960#conf t
2960(config)#archive
2960(config-archive)#log config
2f960(config-archive-log-cfg)#logging enable
2960(config-archive-log-cfg)#notify syslog contenttype plaintext
2960(config-archive-log-cfg)#hidekeys
2960(config-archive-log-cfg)#exit
2960(config-archive)#exit
2960(config)#logging on
2960(config)#login on-failure log
2960(config)#login on-success log
2960(config)#end

[balaji.bandi]

Can you post the running config to look how you configured for the loggin options.

high level config to check do you have below config in place ?

login on-failure log
login on-success log

!

logging trap notifications
logging source-interface eth x/x
logging x.x.x.x 

[dbuckley77]

I have these lines configured:

logging trap notifications
logging source-interface Vlan2
logging 10.100.6.56

I tried configuring these below but it will not let me.  There are no commands for these on the switch.

login on-failure log
login on-success log

[Mark Malone]

try logging trap informational

[dbuckley77]

I tried logging trap informational but that did not work.  I still get the interface up/down traps but not the login traps sent to the syslog.

[balaji.bandi]

can you post show version

[dbuckley77]

#sh ver
Cisco Internetwork Operating System Software
IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA14, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by cisco Systems, Inc.
Compiled Tue 26-Oct-10 10:35 by nburra
Image text-base: 0x80010000, data-base: 0x80680000

ROM: Bootstrap program is C2950 boot loader

CH-IDF-2950G-1 uptime is 37 weeks, 2 hours, 58 minutes
System returned to ROM by power-on
System restarted at 07:07:23 EDT Wed Jul 11 2018
System image file is "flash:c2950-i6k2l2q4-mz.121-22.EA14.bin"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco WS-C2950G-48-EI (RC32300) processor (revision K0) with 19911K bytes of memory.
Processor board ID FHK0717W1YN
Last reset from system-reset
Running Enhanced Image
48 FastEthernet/IEEE 802.3 interface(s)
2 Gigabit Ethernet/IEEE 802.3 interface(s)

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 00:0C:CE:B0:52:C0
Motherboard assembly number: 73-7409-12
Power supply part number: 34-0965-01
Motherboard serial number: FOC071802GR
Power supply serial number: PHI06380H09
Model revision number: K0
Motherboard revision number: A0
Model number: WS-C2950G-48-EI
System serial number: FHK0717W1YN
Configuration register is 0xF

[balaji.bandi]

I do not have in hand to test 2950 with that verison, try to check command referece, due to end of life, could not get any where to see syntax

as @Richard Burts suggested this is not supported feature.

[Richard Burts · Accepted solution]

I believe that this is key information

I tried configuring these below but it will not let me.  There are no commands for these on the switch.

It sure looks like that feature is supported on your 2960s but not supported on your 2950s.

HTH

Rick