Setting The Parameters Of Logs - Huawei quidway s7700 Configuration Manual

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU

2.13.3 Setting the Parameters of Logs

The parameters of logs include the session log host, conditions of recording session logs, and
interval for exporting logs.
Context
The session logs are exported to a log host in real time; therefore, you need to configure the log
host first. To configure the log host, you need to configure the IP address and port number of
the log host and the IP address and port number that the SPU uses to communicate with the log
host.
An ACL is referenced in the interzone view to help decide the sessions to be recorded in the
logs. The ACLs can be configured for the inbound and outbound traffic respectively.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
firewall log binary-log host host-ip-address host-port source source-ip-address
source-port [ vpn-instance vpn-instance-name ]
The session log host is configured.
By default, no session log host is configured.
Step 3 (Optional) Run:
firewall log session out-of-band enable
The SPU exports the session logs to the session log host through the outbound interface (Ethernet
0/0/0).
By default, the logs are not exported through Ethernet 0/0/0.
Step 4 (Optional) Run:
firewall log { blacklist | defend | session | statistics } log-interval time
The interval for exporting logs is set.
By default, logs are exported every 30 seconds.
Step 5 Run:
firewall interzone zone-name1 zone-name2
The interzone view is displayed.
Step 6 Run:
session-log acl-number { inbound | outbound }
The conditions of recording session logs are configured.
By default, no condition is configured in an interzone for recording session logs.
----End
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 Firewall Configuration
65