Cisco Cisco ONS 15454 M6 Multiservice Transport Platform (MSTP)
Date when the action occurred
Date
Incrementing count of actions
Num
User ID that initiated the action
User
Pass/Fail (whether or not the action was executed)
P/F
Action that was taken
Operation
Audit trail records capture the following activities:
• User-Name of the user performing the action
• Host-Host from where the activity is logged
• Device ID-IP address of the device involved in the activity
• Application-Name of the application involved in the activity
• Task-Name of the task involved in the activity (view a dialog box, apply configuration, and so on)
• Connection Mode-Telnet, Console, Simple Network Management Protocol (SNMP)
• Category-Type of change: Hardware, Software, Configuration
• Status-Status of the user action: Read, Initial, Successful, Timeout, Failed
• Time-Time of change
• Message Type-Denotes whether the event is Success/Failure type
• Message Details-Description of the change
Audit Trail Capacities
The system is able to store 640 log entries. When this limit is reached, the oldest entries are overwritten with new events. When the
log server is 80 percent full, an AUD-LOG-LOW condition is raised and logged (by way of Common Object Request Broker
Architecture [CORBA]/CTC).
log server is 80 percent full, an AUD-LOG-LOW condition is raised and logged (by way of Common Object Request Broker
Architecture [CORBA]/CTC).
When the log server reaches a maximum capacity of 640 entries and begins overwriting records that were not archived, an
AUD-LOG-LOSS condition is raised and logged. This event indicates that audit trail records have been lost. Until the user off-loads
the file, this event occurs only once regardless of the amount of entries that are overwritten by the system.
AUD-LOG-LOSS condition is raised and logged. This event indicates that audit trail records have been lost. Until the user off-loads
the file, this event occurs only once regardless of the amount of entries that are overwritten by the system.
RADIUS Security
Superusers can configure nodes to use Remote Authentication Dial In User Service (RADIUS) authentication. RADIUS uses a strategy
known as authentication, authorization, and accounting (AAA) for verifying the identity of, granting access to, and tracking the
actions of remote users. To configure RADIUS authentication, refer to the Cisco ONS 15454 DWDM Network Configuration Guide
.
known as authentication, authorization, and accounting (AAA) for verifying the identity of, granting access to, and tracking the
actions of remote users. To configure RADIUS authentication, refer to the Cisco ONS 15454 DWDM Network Configuration Guide
.
RADIUS server supports IPv6 addresses and can process authentication requests from a GNE or an ENE that uses IPv6 addresses.
13