Solved

Routing Remote Aaccess Service 2008 R2 how to enable loging of event id 20048

Posted on 2011-09-30
3
834 Views
Last Modified: 2012-08-13
Hello All

I have RRAS on 2008 R2 operational, how do I enbale logging of event ID 20048 as described here: http://technet.microsoft.com/en-us/library/cc733823(WS.10).aspx.

I understand that this ID should appear in the windows event viewer system log.

Thanks in advance.
0
Comment
Question by:hairylots
  • 2
3 Comments
 
LVL 39

Expert Comment

by:als315
ID: 36895682
"Event logging

On the Logging tab in the properties of a VPN router in the Routing and Remote Access MMC snap-in, there are four levels of logging. Select Log all events, and then try the connection again. After the connection fails, check the system event log for events logged during the connection process. After you have viewed remote access events, select the Log errors and warnings option on the Logging tab to conserve system resources."
http://technet.microsoft.com/ru-ru/library/dd469757(WS.10).aspx
0
 

Accepted Solution

by:
hairylots earned 0 total points
ID: 36897792
re: als315

Logging is enabled as descibed, I had already done that.
event id 20048 is not logged. I have since noticed that event id 20272 is logged and the only difference between the 2 event messages is the connection speed, contained in20048 but not in 20272.
Event ID 20048:
The user: %1 connected on port: %2 on: %3 at: %4 and disconnected on: %5 at: %6. The user was active for: %7 minutes, %8 seconds. %9 bytes were sent and %10 bytes were received. The port speed was: %11. The reason for disconnecting was: %12.
Event ID: 20272
The user: %1 connected on port: %2 on: %3 at: %4 and disconnected on: %5 at: %6. The user was active for: %7 minutes %8 seconds. %9 bytes were sent and %10 bytes were received. The reason for disconnecting was: %11.

Event ID 20272 will meet my requirements, powershell quesry for event id 20272 for reporting and accounting.

Regards
Andrew
0
 

Author Closing Comment

by:hairylots
ID: 36923053
Previose supplied commnet did not answer question, how to get event ID 20048 logged, it simply stated how to enable logging for RRAS. Logging was already eanbled and is still enabled but evnet id 20048 is not logged.
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
Is your computer hacked? learn how to detect and delete malware in your PC
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now