Cisco ASR 1002

Page 60 of 72
Requirement
Management Action to
Log
Sample Log
[Source: 21.0.0.3] [localport: 22] at 00:05:49 EST
Thu Jan 17 2013
FIA_UAU_EXT.2:
Password-based
authentication mechanism
None
N/A
FIA_UAU.7: Protected
authentication feedback
None
N/A
FIA_X509_EXT.1: X.509
Certificate Validation
Generating a certificate.
Feb 17 2013 16:14:47: %PARSER-5-
CFGLOG_LOGGEDCMD: User:test_admin
logged command: crypto key generate
FMT_MOF.1: Management
of Security Functions
Behavior
See all other rows in table.
N/A
FMT_MTD.1: Management
of TSF data
See all other rows in table.
N/A
FMT_SMF.1: Specification
of management functions
See all other rows in table.
N/A
FMT_SMR.2: Restrictions
on Security roles
Configuring administrative
users with specified roles.
Feb 15 2013 13:12:25.055: %PARSER-5-
CFGLOG_LOGGEDCMD: User:cisco logged
command: username admin 15
FPT_RUL_EXT.1: Packet
Filtering
Configuring packet
filtering rules.
Oct 15 23:39:50 cc_toe 21698: Oct 15
23:39:50.077: \%PARSER-5-
CFGLOG_LOGGEDCMD: User:script logged
command:permit icmp 10.32.0.203 0.0.0.0
10.31.0.101 0.0.0.0 log
Oct 15 23:39:50 cc_toe 21700: Oct 15
23:39:50.261: \%PARSER-5-
CFGLOG_LOGGEDCMD: User:script logged
command:deny icmp 10.32.0.203 0.0.0.0
10.31.0.101 0.0.0.0 log