Enterasys Security Information and Event Manager, Configuration Manual

Page: 264 / 426

Configuring DSMs
248 N
ORTEL
N
ETWORKS
exit
c
Exit the command line session:
logout
Step 16
You are now ready to configure the log source in SIEM.
To configure SIEM to receive events from a Nortel Multiprotocol Router device:

From the Log Source Type drop-down list box, select the Nortel
Multiprotocol Router option.
For more information on configuring log sources, see the Log Sources User Guide .
For more information about your device, see your vendor documentation.
Nortel Application
Switch
Nortel Application Switches integrate routing and switching by forwarding traffic at
layer 2 speed using layer 4-7 information. A SIEM Nortel Application Switch DSM
accepts events using syslog. SIEM records all relevant status and network
condition events. Before configuring a Nortel Application Switch device in SIEM,
you must configure your device to send syslog events to SIEM.
To configure the device to send syslog events to SIEM:
Step 1
Log in to the Nortel Application Switch command line interface (CLI).
Step 2
Type the following command:
/cfg/sys/syslog/host
Step 3
At the prompt, type the IP address of your SIEM system:
Enter new syslog host: <IP address>
Where
<IP address>
is the IP address of your SIEM system.
Step 4
Apply the configuration:
apply
Step 5
After the new configuration is applied, save your configuration:
save
Step 6
Type
y
at the prompt to confirm that you wish to save the configuration to flash.
For example:
Confirm saving to FLASH [y/n]: y
New config successfully saved to FLASH
Step 7
You are now ready to configure the log source in SIEM.
To configure SIEM to receive events from a Nortel Application Switch:

From the Log Source Type drop-down list box, select the Nortel Application
Switch option.