Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

Syslog to locacl host

Hi MY network setup

ISP terminated in router ---> ASA5510--L3(3560)-L2 -LAN

Objective:

Syslog needs to received from router to local machine,

I have added the route in router, and excluding NAT in ASA. From local machine i am able reach router , but from router unable to reach local machine (or syslog server)

pl help

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Syslog to locacl host

Relative information is required if you want help. Here's an example.

access-list SYSLOG_SERVER extended permit ip host 10.10.20.17 host [router IP]

static (inside,outside) 10.10.20.17 access-list SYSLOG_SERVER tcp 65535 10000

access-list outside_access_in extended permit udp host [router IP] host 10.10.20.17 eq syslog

In the router you will need a static route to the inside host pointing to your ASA.

ip route 10.10.20.17 255.255.255.255 [ASA public IP]

4 REPLIES

Re: Syslog to locacl host

Can you post the ASA statics and ACL? What do the logs in the ASA state?

Community Member

Re: Syslog to locacl host

no static in ASA

Only acl and nonat acl

access-list internet-access-list permit ip 10.40.50.0 255.255.255.0 host 220.225.XXX.XXX

access-list noant permit ip 10.40.50.0 255.255.255.0 host 220.225.XXX.XXX

internet-access-list -binding inside interface

nonat-access-list with nat 0

thanks

Re: Syslog to locacl host

Relative information is required if you want help. Here's an example.

access-list SYSLOG_SERVER extended permit ip host 10.10.20.17 host [router IP]

static (inside,outside) 10.10.20.17 access-list SYSLOG_SERVER tcp 65535 10000

access-list outside_access_in extended permit udp host [router IP] host 10.10.20.17 eq syslog

In the router you will need a static route to the inside host pointing to your ASA.

ip route 10.10.20.17 255.255.255.255 [ASA public IP]

Community Member

Re: Syslog to locacl host

thank you very much

162
Views
0
Helpful
4
Replies
CreatePlease to create content