Re: WLC logs for clients to send to a syslog server
In controller software release 220.127.116.11, you can enable the controller to log system events to up to three remote syslog servers. The controller sends a copy of each syslog message as it is logged to each syslog server configured on the controller. Because it is able to send the syslog messages to multiple servers, it ensures that the messages are not lost due to the temporary unavailability of one syslog server.
This type of configuration helps in these situations:
-One of the configured syslog servers is not available.
-Multiple administrator groups can monitor different message types.
-Large deployments can want syslog messages sent to servers across different time-zones for extended visibility. Note: Syslog messages are sent on UDP Port 514; additional server configuration can require a relaxation of firewall rules.
With Wireless LAN Controller Release 5.0, a new CLI has been introduced to configure syslog servers with the CLI. The old command has been deprecated.
Transferring Crash file from standby: Login to the Active WLC in HA.
From CLI: (Cisco Controller) >transfer upload datatype crash (Cisco
Controller) >transfer upload filename (Cisco
Controller) >transfer upload mode tftp (Cisco Controller) >transfer
This is the start of a display filter cross reference between Wireshark
and OmniPeek. The 1st installment is a table of advanced filters. More
filters will be added as time allows. It is a living doc, so check back
for changes every so often Please feel f...