ProCurve Secure Router OS Firewall—Protecting the Internal, Trusted Network
Configuring Logging
4-28
To configure log forwarding to a syslog server, you must:
1.
Enable log forwarding. From the global configuration mode context,
enter:
ProCurve(config)# logging forwarding on
2.
Specify the IP address of the syslog server:
Syntax: logging forwarding receiver-ip <A.B.C.D>
For example:
ProCurve(config)# logging forwarding receiver-ip 172.16.62.99
3.
Configure the syslog facility type:
Syntax: logging facility <facility keyword>
The default setting is kern.
Originally, the syslog facility was used to identify which part of a UNIX
system originated a particular message. This system does not define a
router as such, but the local0 to local7 facilities are typically reserved for
messages from remote devices. The ProCurve Secure Router can set its
message facility type to any of those shown in Table 4-4. You should select
the facility used by routers in your network.
For example, the syslog server in Figure 4-7 is configured to receive logs
from the router on facility local2. You would enter:
ProCurve(config)# logging facility local2
Table 4-4.
Syslog Facilities
Syslog Facility
authorization system
cron facility
system daemon
kernel
locally defined messages
line printer system
mail system
USENET news
system use
Keyword
auth
cron
daemon
kern
local0–local7
lpr
mail
news
sys9–sys14