Community Feedback

 View Only
last person joined: 18 hours ago 

How is the community doing? Do you have any questions or feedback related for the Airheads Community team? This is the place to let us know.
Back to discussions
Expand all | Collapse all

Aruba OSCX How to monitor user logins on syslog?

This thread has been viewed 23 times

  • 1.  Aruba OSCX How to monitor user logins on syslog?

    Posted Jul 27, 2021 08:49 AM
    We have a new Aruba OSCX switch and we already configured  basic config ,
    Now we already have syslog and it seems working for some logs , now we want the CX switch to display users logins on successful or failure attempts .

    We tried debug xxx some commands here but they do not show anything related to users logins , in our other Aruba OS switches we just debug auth-mgr and it shows auth-failure attempts , 

    How to do the same on Aruba CX switch?

    ------------------------------
    Karim Abdallah
    ------------------------------


  • 2.  RE: Aruba OSCX How to monitor user logins on syslog?

    MVP GURU
    Posted Jul 27, 2021 03:00 PM
    user-login on CLI ? or wired ?

    it is on wired, you can look on debug port-access

    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCL: Powershell Module to use Aruba Central

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------

    Original Message


  • 3.  RE: Aruba OSCX How to monitor user logins on syslog?

    Posted Jul 28, 2021 06:30 AM
    No not port Authentication , Just SSH logins to the switches 
    We setup RADIUS for our clients and set usernames/privileges from our side , On AOS we see on syslog the fail logins and user logins by loggin Auth-mgr 

    Now coupld of our clients got OSCX switches and we configured RADIUS to authenticate ssh just fine , but no logs can be seen for either successful or failed logins

    ------------------------------
    Karim Abdallah
    ------------------------------

    Original Message


  • 4.  RE: Aruba OSCX How to monitor user logins on syslog?

    MVP GURU
    Posted Jul 28, 2021 04:16 PM
    you have no event on show logging ?

    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCL: Powershell Module to use Aruba Central

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------

    Original Message


  • 5.  RE: Aruba OSCX How to monitor user logins on syslog?

    Posted Jul 31, 2021 02:12 AM
    There are events showing from show logging -r and show debug buffer
    but neither do they have any logs related to successful/failed authentication when users log on ssh and the switch authenticate through RADIUS

    We need something similar to what we do on AOS switches we get log like this
    User xxx successfully logged on ..........
    Or
    Auth-Failed for user xxxx on ......

    We get these logs by enabling debug level on security event and auth-mgr on AOS switches
    Does Aruba CX has such debugging? security authentication log events?

    ------------------------------
    Karim Abdallah
    ------------------------------

    Original Message