SYSLOG messages on Meraki APs

SOLVED
RL57
Conversationalist

SYSLOG messages on Meraki APs

Does anyone know if any syslog messages from a Meraki AP contain both the username and ip address in a single log?

We are looking to replace a Cisco wireless lan controller and APs with Meraki gear but it is important to be able to capture this kind of info in a syslog entry.

We managed to get this info from the wireless lan controller by using command
logging syslog facility client associate enable
This command extends the syslog capability on the WLC to send this info from SNMP information in the syslog entry

The syslog entry we get on from the WLC looks like the one below

12-02-2019 13:23:00 Local7.Error MYWLC11111: *Dot1x_NW_MsgTask_0: Dec 02 13:23:00.903: %APF-3-AUTHENTICATION_TRAP: apf_80211.c:19434 Client Authenticated: MACAddress:7c:95:f3:60:aa:f4 Base Radio MAC:7c:95:f3:60:aa:f4 Slot:2 User Name:jbloggs Ip Address:172.16.7.84 SSID:MYSSID

Any ideas out there??

 

Much appreciated

1 ACCEPTED SOLUTION
BrechtSchamp
Kind of a big deal

According to this it does, sort of:

https://jackofallit.wordpress.com/2016/03/02/meraki-ap-syslog-user-id-to-palo-alto-firewall/

 

Apparently the IP address is 0.0.0.0 on the first authentication, but filled in in consecutive tries.

 

Note: I haven't tried this. Also, kudos to Jack, whoever he is.

View solution in original post

1 REPLY 1
BrechtSchamp
Kind of a big deal

According to this it does, sort of:

https://jackofallit.wordpress.com/2016/03/02/meraki-ap-syslog-user-id-to-palo-alto-firewall/

 

Apparently the IP address is 0.0.0.0 on the first authentication, but filled in in consecutive tries.

 

Note: I haven't tried this. Also, kudos to Jack, whoever he is.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels