Networks

Ask something
Discussion Locked

Logs on a Cisco Router

0 helpful
5 replies

by siwelab

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hope i find u guys well. I was wondering ...is it possible for me to have like a log table of whoever goes into my router being kept on a server somewhere ? I need a system if possible, that whenever any connection on any port happens on my router, a log is sent to a server and i can then go through it. this is just for minor security measures as this is not really a critical part of the network.

Any suggestions ?

5 replies

by mshavrov

Easiest way is to forward your log to Syslog server. On router you should turn on logging, forward it to specific host and select level of log you want to see.

logging on
logging 10.0.0.1 (your Syslog server)
logging trap 7 (Logging level from 0 to 7)

Now let's talk about Syslog server. If you have at one unused computer (for example, P166/64/1Gb), you may install Linux. All *nix machines are capable to receive Syslog messages and store them in flat text file. After that just look for any software which will make accounting for you.

Another possibility - try to find Syslog for Windows. I use Kiwi Syslog. It's free, but have limited capabilities. If you want to have extended version, you may buy and unlock full features.

Third option is use Radius or Tacacs+ accounting capabilities (if you use them on your router to authenticate users).

Good luck.

This discussion is closed to new replies.