EDIT: Seems i was on the wrong part of the forums when i started typing this post. Sorry about that.
As a part of my final work at school im now trying to get 2 networking devices to send all event data to a syslog server inside the local network.
- Catalyst 3550 switch
- PIX 515E
Now the logging from PIX to the server works fine and without any problems. It was easy to configure and easy to modify also.
I have been trying to configure the same for the 3550 switch but wont get any messages to the server from the switch. Heres what ive configured so far:
Switch(config)#logging facility syslog
Switch(config)#logging source-interface GigabitEthernet 0/1
Switch(config)#logging host <Server IP Address>
Switch(config)#logging trap debugging (or 7)
On the server i have setup the logging so that the server listens to messages from UDP port (default 514) and the TCP port 1470 (default).
I get log from the PIX but not C3550 switch. What might be the reason for this?
Is there something else i need to configure on the switch? Like define more specifically what the switch should log and send to the server?
Hope to get both devices logging to the server as i think its an important part in keeping an eye on whats happening in the network and its devices.
Any help would be appriciated
- Jouni Forss
to get even more basic, make sure the switch can ping your syslog server (ie make sure the default gateway on the switch is set correctly, unless it's in routing mode).
Your logging facility may not be entirely correct which will depend on your syslog.conf file. Try changing it to local4 which is what the PIX logs to by default.
ciscoswitch(config)# logging facility local4
Post a copy of the syslog.conf file if youd like.