*Sep 12 06:28:19.493: %KAZULOG-6-STEPMARK: Message from tty434(user id: cisco): STEP2-BEGIN-20260912-152710
*Sep 12 06:28:19.517: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.100.3.1 (tty = 0) for user 'cisco' using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 12 06:28:38.381: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:28:38.489: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.100.3.1] [localport: 22] at 06:28:38 UTC Sat Sep 12 2026
*Sep 12 06:28:38.489: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:28:43.762: %SYS-6-LOGOUT: User cisco has exited tty session 434(10.100.3.1)
*Sep 12 06:28:43.763: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.100.3.1 (tty = 0) for user 'cisco' using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 12 06:28:59.567: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:28:59.727: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.100.3.1] [localport: 22] at 06:28:59 UTC Sat Sep 12 2026
*Sep 12 06:28:59.728: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:28:59.922: %SYS-6-LOGOUT: User cisco has exited tty session 434(10.100.3.1)
*Sep 12 06:28:59.922: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.100.3.1 (tty = 0) for user 'cisco' using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 12 06:29:00.334: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:29:00.495: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.100.3.1] [localport: 22] at 06:29:00 UTC Sat Sep 12 2026
*Sep 12 06:29:00.497: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:29:00.897: %SYS-5-CONFIG_I: Configured from console by cisco on vty0 (10.100.3.1)
*Sep 12 06:29:01.162: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.100.3.1 (tty = 0) for user 'cisco' using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 12 06:29:09.317: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:29:09.423: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.100.3.1] [localport: 22] at 06:29:09 UTC Sat Sep 12 2026
*Sep 12 06:29:09.424: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:29:09.672: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.100.3.1 (tty = 0) for user 'cisco' using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 12 06:29:15.954: %LINK-3-UPDOWN: Interface GigabitEthernet1, changed state to up
*Sep 12 06:29:16.954: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1, changed state to up
*Sep 12 06:29:18.909: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:29:19.126: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.100.3.1] [localport: 22] at 06:29:19 UTC Sat Sep 12 2026
*Sep 12 06:29:19.126: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:29:19.366: %SYS-5-CONFIG_I: Configured from console by cisco on vty0 (10.100.3.1)
*Sep 12 06:29:19.487: %SYS-6-LOGOUT: User cisco has exited tty session 434(10.100.3.1)
*Sep 12 06:29:19.487: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.100.3.1 (tty = 0) for user 'cisco' using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 12 06:29:40.240: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:29:40.438: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.100.3.1] [localport: 22] at 06:29:40 UTC Sat Sep 12 2026
*Sep 12 06:29:40.439: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:29:41.122: %SYS-6-LOGOUT: User cisco has exited tty session 434(10.100.3.1)
*Sep 12 06:29:41.122: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.100.3.1 (tty = 0) for user 'cisco' using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 12 06:29:41.494: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:29:41.598: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.100.3.1] [localport: 22] at 06:29:41 UTC Sat Sep 12 2026