IPSec Remote Access VPN logging on ASR Router

[faswar.mon]

Dear all,

Please suggest, We want to implement some logging mechanism to see how many users are connected on IPSec VPN with our asr router today and at which time. These logs should be sent to some Syslog server. Syslog server is already configured. Currently, we don't get any log message generated whenever a user connects on VPN although we can see current VPN sessions using show crypto commands but not some kind of log.

Your help will be appreciated in this regards. Thanks.

Regards,

[Mohammed al Baqari · Accepted solution]

Use the command 'crypto logging session'

this will generate syslogs as below.

– %CRYPTO-5-SESSION_STATUS: Crypto tunnel is UP . Peer
40.10.1.1:500 Id: 40.10.1.1

– %CRYPTO-5-SESSION_STATUS: Crypto tunnel is DOWN. Peer
40.10.1.1:500 Id: 40.10.1.1

[faswar.mon]

Dear Mohammed al Baqari,

Thanks a lot, this helped me and pointed me in the right direction.

Just for others below logging command gives more details and more help in order to know which user has logged on and logged out in RA VPN.

crypto logging ezvpn

Thanks.