Table of Contents
Advertisement
3.4 Remote Syslog Notification
Introduction
Preconditions
Syslog host on the local
network
Syslog host on a
remote network
Application Note Ed. 01
As described before the SpeedTouch
of generated syslog messages to a host on the local or a remote network IP address.
This section describes how to configure the SpeedTouch
sending messages to a particular host.
The host to send the syslog messages to, should have syslog daemon software installed
for capturing the messages, and a known, fixed IP address.
By default, no traffic restrictions apply for the local network. Simply add a syslog rule via
TM
the SpeedTouch
610 syslog configuration web page or the CLI. Specify the IP address
of the host, and optionally refine the set of syslog messages to send.
You can specify one or a selection of (comma-seperated) or all facilities.
Note
Specifying a severity actually means specifying to send syslog messages with a
severity as specified, and all messages with a higher severity.
For a priority listing see
The following example shows the configuration via the CLI for a syslog host on the local
"Net10" network with fixed IP address 10.0.0.1 to send all generated syslog messages
(all facilities, with severity debug and higher) to:
=>syslog ruleadd
fac = all
sev = debug
dest = 10.0.0.1
:syslog ruleadd fac=all sev=debug dest=10.0.0.1
=>saveall
=>
The default firewall rules do allow traffic from the SpeedTouch
towards the WAN due to following firewall rule in the source:
:firewall rule create chain=source index=4 prot=udp dstport=syslog action=accept
Therefore, no additional firewall configuration is needed in case you want to configure a
syslog host on a remote network
The example below shows the syslog rule to add for a syslog host with IP address
192.6.11.1, accessible via the separate management PVC with the Routed IPoA Packet
Service configuration in the 192.6.11.x/24 range of IP addresses. The local syslog host
(10.0.0.1), configured before (See
generated syslog messages; the remote syslog host only receives syslog messages from
all facilities with severity warning, error, critical, alert or emergency (all facilities, with
severity warning and higher):
=>syslog ruleadd fac=all sev=warning dest=192.6.11.1
=>
=>syslog list
1: all.debug
2: all.warning
=>
=>saveall
=>
3 SpeedTouch
TM
610 can be configured to send all or a selection
TM
610 syslog daemon for
" Syslog priority severities" on page
" Syslog host on the local network"
10.0.0.1
192.6.11.1
TM
610 Syslog
14.
TM
610 syslog daemon
) will receive all
19
Advertisement
Table of Contents
