RE: logging the access on a router [7:34346]

2002-02-04 Thread Alex Lei

Hello,

You can use access lists to log it. You can use either logging buffered
(limited in number of entries) or use a dedicated log server.

Alex


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34353&t=34346
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: logging the access on a router [7:34346]

2002-02-04 Thread Fraasch James

Syslog doesn't do user information.   You have two choices:  Make an
extended access list with the keyword log to log telnet packet access, OR
configure aaa and log the "debug aaa auth" output

Probably a little more than you had hoped for but should do the trick.

Dion, Thierry wrote:
> 
> Hello
>  
> I'm trying to log access on a router (who and when) with a
> simple
> configuration ( without tacacs+ or radius)
> how i can do this ?
> 
> Kind Regards.
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34365&t=34346
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: logging the access on a router [7:34346]

2002-02-04 Thread Vincent Miller

Is this what you had in mind ?

! Last configuration change at 00:05:35 ECT Wed Nov 22 2000
! NVRAM config last updated at 00:05:38 ECT Wed Nov 22 2000
!
version 12.0
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname xx
!
logging buffered 4096 debugging

the service timestamps will do the trick. you can create a local database of
userids/passwords that can make changes, the userid will
be included in the two lines at the top


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34370&t=34346
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: logging the access on a router [7:34346]

2002-02-04 Thread Keyur Shah

set debug for aaa and configure to log to syslog. It is not easy to parse
that log though, but can be done.

-Keyur Shah-
CCIE# 4799 (Security; Routing and Switching)
css1,scsa,scna,mct,mcse,cni,mcne
Hello Computers
"Say Hello to Your Future!"
http://www.hellocomputers.com
Toll-Free: 1.877.794.3556 
"Now offering CCIE Security Lab Workbook and remote bootcamp,
http://www.hellocomputers.com/hellosuccess.html";

-Original Message-
From: Dion, Thierry [mailto:[EMAIL PROTECTED]] 
Sent: Monday, February 04, 2002 8:09 AM
To: [EMAIL PROTECTED]
Subject: logging the access on a router [7:34346]


Hello
 
I'm trying to log access on a router (who and when) with a simple
configuration ( without tacacs+ or radius) how i can do this ?

Kind Regards.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34369&t=34346
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: logging the access on a router [7:34346]

2002-02-05 Thread Dion, Thierry

Hello vincent

is not exactly this form cause U have only the last login user viewing by
sho run.
I would like to se all user's connexions on the router.

james at 00:05:35 Wed Nov 22 2000
steve at 00:07:05 Wed Nov 22 2000
Francis at 00:13:09 Wed Nov 22 2000



-Message d'origine-
De : Vincent Miller [mailto:[EMAIL PROTECTED]]
Envoyi : lundi 4 fivrier 2002 20:42
@ : [EMAIL PROTECTED]
Objet : RE: logging the access on a router [7:34346]
Importance : Faible


Is this what you had in mind ?

! Last configuration change at 00:05:35 ECT Wed Nov 22 2000
! NVRAM config last updated at 00:05:38 ECT Wed Nov 22 2000
!
version 12.0
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname xx
!
logging buffered 4096 debugging

the service timestamps will do the trick. you can create a local database of
userids/passwords that can make changes, the userid will
be included in the two lines at the top




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34446&t=34346
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]