https://community.extremenetworks.com/t5/security-access-control/eac-log-of-switches-admin-access/m-p/113144#M51 <P>Management login requests are recorded in the nacApplianceEvent.log in the usual appdata/logs sub-directory. They are also viewable in the XIQ-SE GUI under Alarms &amp; Events -&gt; Events -&gt; Access Control Engine events...</P><P>Example:</P><P>377641 2024-09-17T14:14:52UTC Access Control Engine Event.6.Event --- --- 192.168.1.102 NAC Appliance Event Management login to switch 192.168.1.2. User: extreme, NAC Filter-Id: null, Profile: Administrator NAC Profile Authentication Protocol: PAP, Request Attributes - User-Name: extreme, NAS-IP-Address: 192.168.1.2, Source-Address: 192.168.1.2 - Response Attributes - Tunnel-Type: 13:0, Tunnel-Medium-Type: 6:0 - This is an administrative request because Calling-Station-Id is not present xiqsenac1</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Robert_Haynes_0-1726582657315.png" style="width: 400px;"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/8235i5CFBA9881C95BBF0/image-size/medium?v=v2&amp;px=400" role="button" title="Robert_Haynes_0-1726582657315.png" alt="Robert_Haynes_0-1726582657315.png" /></span></P><P>&nbsp;</P> Tue, 17 Sep 2024 14:17:50 GMT Robert_Haynes 2024-09-17T14:17:50Z https://community.extremenetworks.com/t5/security-access-control/eac-log-of-switches-admin-access/m-p/113135#M50 <P>Hi Team,</P><P>In and EAC deployment with to types of policies, one for devices and users access to the net, other for administration to the switches.</P><P>The first one are tracked in the tab "End-Systems" under Engine Group section, but I cant find the second logs, please someone know where are they registered?</P><P>Regards!!</P><P>EF</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 17 Sep 2024 10:22:09 GMT https://community.extremenetworks.com/t5/security-access-control/eac-log-of-switches-admin-access/m-p/113135#M50 EF 2024-09-17T10:22:09Z https://community.extremenetworks.com/t5/security-access-control/eac-log-of-switches-admin-access/m-p/113144#M51 <P>Management login requests are recorded in the nacApplianceEvent.log in the usual appdata/logs sub-directory. They are also viewable in the XIQ-SE GUI under Alarms &amp; Events -&gt; Events -&gt; Access Control Engine events...</P><P>Example:</P><P>377641 2024-09-17T14:14:52UTC Access Control Engine Event.6.Event --- --- 192.168.1.102 NAC Appliance Event Management login to switch 192.168.1.2. User: extreme, NAC Filter-Id: null, Profile: Administrator NAC Profile Authentication Protocol: PAP, Request Attributes - User-Name: extreme, NAS-IP-Address: 192.168.1.2, Source-Address: 192.168.1.2 - Response Attributes - Tunnel-Type: 13:0, Tunnel-Medium-Type: 6:0 - This is an administrative request because Calling-Station-Id is not present xiqsenac1</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Robert_Haynes_0-1726582657315.png" style="width: 400px;"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/8235i5CFBA9881C95BBF0/image-size/medium?v=v2&amp;px=400" role="button" title="Robert_Haynes_0-1726582657315.png" alt="Robert_Haynes_0-1726582657315.png" /></span></P><P>&nbsp;</P> Tue, 17 Sep 2024 14:17:50 GMT https://community.extremenetworks.com/t5/security-access-control/eac-log-of-switches-admin-access/m-p/113144#M51 Robert_Haynes 2024-09-17T14:17:50Z