Service IronWare Administration Guide (Supporting R05.6.00) User Manual

346 Multi-Service IronWare Administration Guide
53-1003028-02
Syslog messages
A
Informational Security outbound telnet session number
logout from server IP ip from SSH session
session number
A user has terminated an outbound Telnet
session initiated from an inbound SSH
session.
The first session number is the number of
the outbound Telnet session.
The ip is the IP address from which the
Telnet session has disconnected.
The second sessions number is the number
of the inbound SSH session.
Informational Security startup-config was changed {by
user} from {web management I snmp
management I ssh client ipI telnet client ip}
A configuration change was saved to the
startup configuration file.
The user is the user’s ID, if they entered a
user ID to log in.
Informational Security running-config was changed {by
user} from {web management I snmp
management I ssh client ip I telnet client
ip}
A configuration change was saved to the
running configuration file.
The user is the user’s ID, if they entered a
user ID to log in.
Informational Security telnet | SSH | web access [by
username] from src IP source ip address,
src MAC source MAC address rejected, n
attempts
There were failed web, SSH, or Telnet login
access attempts from the specified source
IP and MAC address.
• [by user username] does not appear if
telnet or SSH clients are specified.
• n is the number of times this SNMP
trap occurred in the last five minutes,
or other configured number of
minutes.
Informational Security user username added | deleted |
modified from console | telnet | ssh | web
| snmp
A user created, modified, or deleted a local
user account through the Web, SNMP,
console, SSH, or Telnet session.
Informational Security Enable super | port-config |
read-only password deleted | added |
modified from console | telnet | ssh | web
| snmp
OR
Line password deleted | added | modified
from console | telnet | ssh | web | snmp
A user created, re-configured, or deleted an
Enable or Line password through the Web,
SNMP, console, SSH, or Telnet session.
TABLE 60 Syslog messages VLAN
Message level Message Explanation
Informational VLAN Id vlan-id added | deleted | modified
from console | telnet | ssh | web | snmp
session
A user created, modified, or deleted a VLAN
through the Web, SNMP, console, SSH, or
Telnet session.
TABLE 59 Syslog messages security (Continued)
Message level Message Explanation