Figure - Cisco ONS 15454 DWDM Installation And Operation Manual

20.3.2 Audit Trail Capacities
Table 20-4
Heading
Date
Num
User
P/F
Operation
Audit trail records capture the following activities:
•
•
•
•
•
•
•
•
•
•
•
20.3.2 Audit Trail Capacities
The system is able to store 640 log entries.When this limit is reached, the oldest entries are overwritten
with new events. When the log server is 80 percent full, an AUD-LOG-LOW condition is raised and
logged (by way of Common Object Request Broker Architecture [CORBA]/CTC).
When the log server reaches a maximum capacity of 640 entries and begins overwriting records that were
not archived, an AUD-LOG-LOSS condition is raised and logged. This event indicates that audit trail
records have been lost. Until the user off-loads the file, this event occurs only once regardless of the
amount of entries that are overwritten by the system. See the
Record" procedure on page 13-16
20.4 RADIUS Security
Superusesr can configure nodes to use Remote Authentication Dial In User Service (RADIUS)
authentication. RADIUS uses a strategy known as authentication, authorization, and accounting (AAA)
for verifying the identity of, granting access to, and tracking the actions of remote users. See the
"DLP-G281 Configure the Node for RADIUS Authentication" task on page
Cisco ONS 15454 DWDM Installation and Operations Guide, R6.0
20-8
Audit Trail Window Columns
Explanation
Date when the action occurred
Incrementing count of actions
User ID that initiated the action
Pass/Fail (whether or not the action was executed)
Action that was taken
User—Name of the user performing the action
Host—Host from where the activity is logged
Device ID—IP address of the device involved in the activity
Application—Name of the application involved in the activity
Task—Name of the task involved in the activity (view a dialog box, apply configuration, and so on)
Connection Mode—Telnet, Console, Simple Network Management Protocol (SNMP)
Category—Type of change: Hardware, Software, Configuration
Status—Status of the user action: Read, Initial, Successful, Timeout, Failed
Time—Time of change
Message Type—Denotes whether the event is Success/Failure type
Message Details—Description of the change
for more information.
Chapter 20 Security Reference
"NTP-G109 Off-Load the Audit Trail
10-55as needed.
August 2005