vpn connections

[Russmis]

Is there way to check when a user connects with vpn?

 

[Supergrrover]

Setup AAA authentication and accounting for the VPN using radius.


Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[RRTier3]

any reason why u wanna use radius instead of tacacs+

 

[Russmis]

Any other way I could do it?

 

[Supergrrover]

You can set the pix to log that event as an alert and check the system log.

logging enable
logging buffered debugging

Now initiate the vpn connection and check the syslog messages in the buffer and see what messages you want to isolate then

logging message syslogid# level 2
logging buffered 2

You also can use an external syslog server and do the same for that (kiwi is a free syslog server or any build of linux) or through the asdm/pdm.



As I recall, tacacs does not do accounting services.

Brent
Systems Engineer / Consultant
CCNP, CCSP