Event Logging; Setting The Destination - Lantronix SCS Reference Manual

Security
When a filter list is created, it must be assigned a name of no more than 12 characters. The remainder
1
of the configuration consists of a series of rules that will filter packet traffic in a particular way.
Use the Set/Define Filter command to create a new filter.
Local>> DEFINE FILTER firewall ADD 1 DENY IP SRC 192.0.1.0 255.255.255.0
Each rule is assigned a particular position in the filter list, denoted by a number. In Figure 11-48, the
rule Deny IP will be added to the firewall filter in the first position of the list. If a position number
isn't specified with the Set/Define Filter command, the rule will be added to the end of the filter list.
Set/Define Filter has many parameters, which are described in detail on page
Note:
12-166.
A single filter list can be associated with many sites. Each site may use a filter list as an incoming,
2
outgoing, startup, or idle filter.
Filter list types are described in Table 11-1 on page 11-23.
Note:
To associate a filter list with a site, use the Define Site Filter command.
Local>> DEFINE SITE irvine FILTER IDLE firewall
Local>> DEFINE SITE dallas FILTER INCOMING firewall
In Figure 11-49, filter firewall will be used as an idle filter for site irvine, and as an incoming filter
for site dallas. An example firewall is described in Creating a Firewall on page 11-30
Filters can also be used with RADIUS. See Filter-ID on page D-3 for more
Note:
information.

11.7 Event Logging

Event logging enables a network administrator to track network and user activity. Logging can be
configured at a number of levels. For example, one level of logging may record only system problems
related to authentication, and another level may record all authentication activities (all passwords).

11.7.1 Setting the Destination

In order to use logging, the SCS must be configured to send logging information to one of the following
destinations:
A TCP/IP host running syslog
SCS memory
The SCS serial console port, typically port 1
A file stored locally on the SCS. The default disk location is /ram.
Figure 11-48: Define Filter Command
Figure 11-49: Associating a Filter List With Sites
11-25
Event Logging