Collecting MAC address of devices connected to my network Through Cisco Aeronet 2600

i have cisco aironet 2600 Access point,  i want to get log details or  simply list of MAC address of devices connected to my network through the same access point.

 Through GUI i was able to find List of devices with detail (with MAC address ) connected , at present time, not  devices connected in past.

That is if i want List of MAC address of devices connected , to my AP in Last 7 days , i don't find way to do it.

Kindly Guide.
FiruITAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

gheistCommented:
Current associations are readable via snmp, while association activities can be collected via syslog. Either way you need some monitoring system (preferably Linux)
0
kevinhsiehCommented:
Solarwinds has a free syslog collector that you can use on Windows. You should receive events every time any device connects or disconnects, so you will need to massage the data to get just the unique MAC addresses.

http://www.solarwinds.com/products/freetools/free-kiwi-syslog-server.aspx
0
gheistCommented:
kiwi syslog has another one...
0
What were the top attacks of Q1 2018?

The Threat Lab team analyzes data from WatchGuard’s Firebox Feed, internal and partner threat intelligence, and a research honeynet, to provide insightful analysis about the top threats on the Internet. Check out our Q1 2018 report for smart, practical security advice today!

Craig BeckCommented:
Officially, Cisco Prime Infrastructure is the tool for this, but any Syslog server will collect association info providing the AP is running in autonomous (no controller) mode.
0
Davis McCarnOwnerCommented:
Assuming the Cisco is acting as the DHCP server, what you are seeing is not the list of currently connected devices; but, rather those whose DHCP lease has not expired.  I, for example, will inspect my router and regularly see listed a PC/device that the client took home yesterday because their DHCP lease has not expired.

If all you want is a listing of devices connected in the last week, change the lease time to 7 days, wait a week, and look.
0
gheistCommented:
Wireless associataion is more representative of a device.
0
Craig BeckCommented:
Unfortunately if the Cisco AP is acting as a DHCP server it will also give clients on other APs (and therefore also the switched network), so checking the DHCP binding table isn't really a reliable solution to check which clients connected wirelessly as you'll get a mix and no way to tell if they were wired or wireless.

Looking at the association/authentication logs which are collected via Syslog really is the only accurate solution if you don't have Prime Infrastructure.
0
gheistCommented:
And you can have bridged virtual machines over wireless where one associated device holds heap of DHCP leases...
0
FiruITAuthor Commented:
Dear all thanks for answers ,

My question was how to get details   , of Users from aeronet AP,       who is getting connected (MAC address ) to my Network through same  device .

as i said above...... from aeronet GUI ,     i can get details of current users details but not past records.

( this device is not DHCP , and i dont want the result from , Solar wind , Kiwi or wire shark)

i want this details from AP , my question is ....is there any way to get it from AP itself....?
0
gheistCommented:
As you already notd in your initial question - Aironet stores syslog records until memory runs out or it is powered off.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Craig BeckCommented:
The answer is no.  You need Prime Infrastructure for this, as I said in this post.
0
gheistCommented:
I think we can stop after 3rd rephrase of question.... Asker just does not get the click - either DIY or pay up...
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Wireless Hardware

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.