...
| Блок кода |
|---|
wlc-30-1# show syslog flash:syslog/web.log 2025-09-23T13:36:57+07:00 %WEB-I-CMD: user admin with IP 100.129.71.30 from page config/wireless/common-settings set attr airtune_enable from true to false 2025-09-23T13:37:03+07:00 %WEB-I-CRIT: user 'admin' with IP '100.129.71.30' on page 'config/wireless/common-settings' commited changes to configuration 2025-09-23T13:37:07+07:00 %WEB-I-CRIT: user 'admin' with IP '100.129.71.30' on page 'config/wireless/common-settings' confirmed changes to configuration 2025-09-23T13:37:39+07:00 %WEB-I-CMD: user admin with IP 100.129.71.30 from page config/wireless/profiles/ssid-profiles deleted object ssid_test4 2025-09-23T13:37:50+07:00 %WEB-I-CMD: user admin with IP 100.129.71.30 from page config/wireless/profiles/radius-profiles created object radius-test 2025-09-23T13:38:15+07:00 %WEB-I-CMD: user admin with IP 100.129.71.30 from page config/wireless/profiles/radius-profiles/radius-test set attr auth_address from "NONE" to "10.10.0.1" 2025-09-23T13:38:15+07:00 %WEB-I-CMD: user admin with IP 100.129.71.30 from page config/wireless/profiles/radius-profiles/radius-test set attr auth_password ascii-text encrypted from 2025-09-23T13:38:55+07:00 %WEB-I-CRIT: user 'admin' with IP '100.129.71.30' on page 'config/wireless/profiles/radius-profiles/radius-test' commited changes to configuration 2025-09-23T13:38:56+07:00 %WEB-I-CRIT: user 'admin' with IP '100.129.71.30' on page 'config/wireless/profiles/radius-profiles/radius-test' confirmed changes to configuration |
Логирование действий WEB на TACACS сервер
При активированной команде aaa accounting commands и aaa accounting login, так же настроенном tacacs-server host можно реализовать отправку логов на TACACS сервер.
Пример настройки:
| Блок кода |
|---|
aaa accounting login start-stop tacacs
aaa accounting commands stop-only tacacs
tacacs-server host 100.110.2.41
key ascii-text encrypted testkey
exit |
При данных настройках будет осуществляться отправка логов на 100.110.2.41 с ключом testkey
Пример логов на TACACS сервере
| Блок кода |
|---|
2025-09-23 07:41:30 +0000 100.129.71.9 admin web 100.129.71.30 start start_time=1758613290 task_id=20130 service=shell
2025-09-23 07:41:44 +0000 100.129.71.9 admin web 100.129.71.30 start start_time=1758613304 task_id=0 service=shell cmd=deleted object ssid_test5 from page config/wireless/profiles/ssid-profiles
2025-09-23 07:42:04 +0000 100.129.71.9 admin web 100.129.71.30 start start_time=1758613324 task_id=0 service=shell cmd=created object test from page config/wireless/profiles/ssid-profiles
2025-09-23 07:42:10 +0000 100.129.71.9 admin web 100.129.71.30 start start_time=1758613330 task_id=0 service=shell cmd=set attr ssid from "NONE" to "test" from page config/wireless/profiles/ssid-profiles/test
2025-09-23 07:42:15 +0000 100.129.71.9 admin web 100.129.71.30 start start_time=1758613335 task_id=0 service=shell cmd=commited changes to configuration from page config/wireless/profiles/ssid-profiles/test
2025-09-23 07:42:16 +0000 100.129.71.9 admin web 100.129.71.30 start start_time=1758613336 task_id=0 service=shell cmd=confirmed changes to configuration from page config/wireless/profiles/ssid-profiles/test
|