Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

How to configure SBR to show Auth Logs under Administrator UI for more than 2 days

0

0

Article ID: KB11796 KB Last Updated: 08 Mar 2017Version: 5.0
Summary:

Often, administrators need to run health checks on SBR or will want to generate reports for SBR for days in the last week, month, or even year. This type of report can be viewed by walking through the "Auth Logs"; however, by default theseonly are stored for two days. This document outlines how to configure SBR to keep and display this information for longer periods.

Symptoms:

How to configure SBR to show “Auth Logs” under for more than 2 days

Solution:

The SBR Admin UI allows administrators to view "Auth Logs" for two days by default. This can be extended by modifying the ini file that corresponds to each report type.

The "Successful Authentication Requests" Report corresponds to authReportAccept.ini and reports all Access-Accepts we sent for a given day.
The "Failed Authentication Requests" Report corresponds to authReportReject.ini and reports all Access-Rejects we sent for a given day.
The "Invalid Shared Secret Requests" Report corresponds to 
authReportBadSharedSecret.ini and reports all RADIUS requests which were rejected due to a Bad Shared Secret.
The "Unknown Client Requests" Report corresponds to authReportUnknownClient.ini and reports all RADIUS requests which were silently discarded due to not being in the RADIUS Client list.


In each of these files, configure the number of days to keep the reports under the [Settings] section using the DaysToKeep feild. The default for this feild is 1, meaning that it will keep only the current day's statistics and the statistics for one day prior. Also note that the DaysToKeep Feild is commented by default (Signified by the semicolon in front). In order for the feild to be read in, the leading semicolon must be removed.

Once these 4 files have been configured restart the "Steel-Belted RADIUS" service. Going forward SBR will not delete the report files until the newly configured limit has been reached.

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search