Auditing Transactions / Administration; Cli Command Auditing (Via Syslog) - Avaya G250 Technical White Paper

Auditing Transactions / Administration

4. CLI Command Auditing (via Syslog)

Config change related SNMP traps will be sent if "config" trap is enabled. It
is enabled by default when typing "set snmp trap enable all".
traps can be sent to a log file, console session, telnet session and stored
on the Gateway.
Relevant logs can also be sent to a syslog server by enabling a log server
through the CLI:
set logging server x.x.x.x
set logging server x.x.x.x enable
set logging server condition CLI Notification x.x.x.x
The above example will log to the syslog server x.x.x.x every event from the
CLI application with severity "Notification" and above. Other applications
are also available.
Examples:
01-13-2004 13:27:23
Command[CLI-Notification: root: session mgc<000>
01-13-2004 13:26:50
CliCommand[CLI-Notification: root: set mediaserver 192.168.1.20 192.168.1.70 5023
sat<000>
01-13-2004 13:26:22
CliCommand[CLI-Notification: root: set mediaserver 192.168.1.70 192.168.1.30 5023
sat<000>
01-13-2004 13:22:26
CliCommand[CLI-Notification: root: copy running-config startup-config <000>
01-13-2004 13:18:55
CliCommand[CLI-Notification: root: dir<000>
01-13-2004 13:18:36
CliCommand[CLI-Notification: root: telnet 192.168.1.1<000>
01-13-2004 13:17:48
CliCommand[CLI-Notification: root: traceroute 131.94.57.51<000>
01-13-2004 13:17:18
CliCommand[CLI-Notification: root: hostname G350<000>
01-13-2004 13:15:44
CliCommand[CLI-Notification: root: ping 192.168.1.1<000>
01-13-2004 13:15:19
CliCommand[CLI-Notification: root: set logging server condition CLI Notification
192.168.1.100<000>
GPW/AMK ©2005 Avaya Inc. All Rights Reserved. Avaya and the Avaya logo are trademarks of Avaya Inc. and
may be registered in certain jurisdictions. All trademarks identified by ® and ™ are registered
trademarks or trademarks respectively, of Avaya Inc. All other registered trademarks or trademarks
Local7.Notice 192.168.1.70 JAN 13 13:27:26 192.168.1.70 Cli
Local7.Notice 192.168.1.70 JAN 13 13:26:53 192.168.1.70
Local7.Notice 192.168.1.70 JAN 13 13:26:25 192.168.1.70
Local7.Notice 192.168.1.70 JAN 13 13:22:29 192.168.1.70
Local7.Notice 192.168.1.70 JAN 13 13:18:58 192.168.1.70
Local7.Notice 192.168.1.70 JAN 13 13:18:38 192.168.1.70
Local7.Notice 192.168.1.70 JAN 13 13:17:50 192.168.1.70
Local7.Notice 192.168.1.70 JAN 13 13:17:20 192.168.1.70
Local7.Notice 192.168.1.70 JAN 13 13:15:46 192.168.1.70
Local7.Notice 192.168.1.70 JAN 13 13:15:21 192.168.1.70
are property of their respective owners.
9
Additionally,
Avaya G250/G350
Media Gateway
Security Features
Overview