No but, LMS along with DFM, HUM and all that will work. This link describes AAA accounting, if you really want to persue it.  I'm not a TACACS user but there that approach too. http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_accountg.html For me?  I am with you, I don't know why Cisco changed this in NXOS, it worked fine using syslog. Good luck, Mike ... View more

You need to setup AAA accounting to capture this.  That means TACACS or RADIUS. Cheers, Mike ... View more

Thanks Phil, that is helpful.  I also need to get it off to a syslog server.  Can that be done? Mike ... View more

Hi Brent, I recommend that you make sure you understand the security implications of your topology.  I only mention it because you stated that you didn't have much in the way of network experience.  If your device will be accessible from the public Internet, make sure you (at least) disable telnet and use only SSH to access it.  In addition, you should limit (by way of access lists) which IPs can access the SSH session. If all this is obvious to you then good enough. Cheers, Mike ... View more

Thanks Robert. Cheers, Mike ... View more

I don't suppose anyone has answered this, but I am finding the same issue on version 5.0(3) on the N7010.  Please post if you know how to put an interface into a defaulted state (I give points!). Thanks, Mike ... View more

Paul, thanks for your feedback. I did in fact fix the missing server name following the t ftp:// . After updating the name though, it continued to fail. Apparently in the top of the config was a statement reflecting NO DHCP SERVICE. Unknown why it was there. Apparently the default is to start the service. I had set the 15 second on the write-delay for testing purposes. I'll adjust it up to 15 mins as you recommend.There was also a bug entered on our IOS version 12.2(50). I have since upgraded to (52). I was finally able to get binding information written out to tftp. As you mention, the files do have to be initially created with correct permissions. I noted though, while testing at one point, the data file got created automatically. I'm uncertain why. I did test changing the tftp: as you mention; yet seemed to have no effect on our 2960g's. One Cisco engineer told me we can use a single tftp file for multiple switches. This is not correct. In fact, it will only save the bindings from the last switch. What I notice now is the following fields never seem to be updated: Agent Running: No Delay Timer Expiry : Not Running Abort Timer Expiry : Not Running However; I did note bindings are making their way into the tftp: file. I'm having difficulties finding the exact meaning for the above. Another interesting note. To enter a static entry into the dhcp snooping table, the expiry field is required. To enter an indefinite lease, I have to enter the maximum value of 4294967295. Displaying the bindinds afterwards will show an indefinite lease - the behavior I'd expect if I left the expiry keyword off. I'm uncertain the best method to entering a static reservation - using dhcp snooping binding or arp acl. How do you handle your static entries? We use DHCP to hand out addresses, yet have some machines with static reservations as well. Did you apply snooping to just your access layer, or distribution as well? ... View more