Friday, November 6, 2020

IOS XE Log files do not have the username of a failed auth attempt

I posted this in /r/cisco as well, but I thought posting it here might improve my chances. If it doesn't belong here, i'll remove it.

I'm trying to finish setting up my syslog server and I'm noticing that my IOS XE switches do not log the username of the failed auth attempt. The log message reads "Login Failed [User:] [Source: 192.168.1.2] [LocalPort: 22] [Reason: Login Authentication Failed]"

Am I doing something wrong here? It's obviously getting logged, just not what username was attempted.



No comments:

Post a Comment