EAC - log of switches admin access

[EF]

Hi Team,

In and EAC deployment with to types of policies, one for devices and users access to the net, other for administration to the switches.

The first one are tracked in the tab "End-Systems" under Engine Group section, but I cant find the second logs, please someone know where are they registered?

Regards!!

EF

[Robert_Haynes · Accepted solution]

Management login requests are recorded in the nacApplianceEvent.log in the usual appdata/logs sub-directory. They are also viewable in the XIQ-SE GUI under Alarms & Events -> Events -> Access Control Engine events...

Example:

377641 2024-09-17T14:14:52UTC Access Control Engine Event.6.Event --- --- 192.168.1.102 NAC Appliance Event Management login to switch 192.168.1.2. User: extreme, NAC Filter-Id: null, Profile: Administrator NAC Profile Authentication Protocol: PAP, Request Attributes - User-Name: extreme, NAS-IP-Address: 192.168.1.2, Source-Address: 192.168.1.2 - Response Attributes - Tunnel-Type: 13:0, Tunnel-Medium-Type: 6:0 - This is an administrative request because Calling-Station-Id is not present xiqsenac1