07-18-2022 03:21 AM
Is there a way to obtain logs to identify when a user device was added/ deleted from a Cisco wireless controller? If so, how to configure such logs?
07-18-2022 03:46 AM
- Usually you will not have users on a WLC directly but through external repositories , frequently accessed through radius , like for instance through ISE for instance, the question then falls back to those platforms holding the user database(s).
M.
07-18-2022 07:38 AM - edited 07-18-2022 07:40 AM
IOS-XE (9800) logs that by default in the syslogs depending on what level of logging you have configured.
%CLIENT_ORCH_LOG-7-CLIENT_MOVED_TO_RUN_STATE and %CLIENT_ORCH_LOG-7-CLIENT_MOVED_TO_DELETE_STATE amongst others.
Haven't checked myself but you could probably configure traps if you wanted to - at your own risk because will generate a lot of traps.
On AireOS you can configure SNMP traplogs - same warning as above. Will flood your management system with traps and create CPU load on the controller.
Of course if you just want to watch a specific device you could enable debugs for that MAC address.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide