Differences between revisions 4 and 5
⇤ ← Revision 4 as of 2012-09-10 15:01:54 →
Size: 1119
Editor: PieterSmit
Comment:
← Revision 5 as of 2013-01-25 07:20:03 → ⇥
Size: 1397
Editor: PieterSmit
Comment: add tcp syslog
Deletions are marked like this. Additions are marked like this.
Line 45: Line 45:

 * Syslog TCP
   {{{
      !!TCP syslog more reliable, as router detects when msg not delivered.
      !!Due to Cisco IOS bug tcp syslog only usable after 12.4 as it did not send LF to split logs.
      logging host 10.10.240.22 transport tcp port 601
      !!
   }}}

Logging

Sniff and Span

  • ! Defines VLAN 999 as the RSPAN VLAN 
    •      vlan 999
     remote-span

Logging / Cisco

  • Cisco can not log changes to syslog.

    • http://www.cisco.com/en/US/docs/ios/12_3t/12_3t4/feature/guide/gtconlog.html

    • FTP config upload example. 

        config terminal
  !(config)#
    ntp server 10.10.240.21
    clock timezone GMT+2 2
    service timestamps log datetime show-timezone msec localtime

        config terminal
  !(config)#
    logging host 10.10.240.23
    logging trap informational
    logging userinfo
    logging on
    archive
  !(config-archive)#
    !! {-- path tftp://172.17.13.13//auto-RTR --}
    path tftp://10.10.240.25/auto-!RTR!
    write-memory
    time-period 129600
    log config
  !(config-archive-log-cfg)#
    notify syslog
    logging enable
  • Syslog TCP 
    •       !!TCP syslog more reliable, as router detects when msg not delivered.
      !!Due to Cisco IOS bug tcp syslog only usable after 12.4 as it did not send LF to split logs.
      logging host 10.10.240.22 transport tcp port 601
      !!

...

CategoryCisco

cisco/Logging (last edited 2013-01-25 07:20:03 by PieterSmit)