Enterasys Security Information and Event Manager, Configuration Manual

Page: 265 / 426

Configuring DSMs
Nortel Contivity 249
For more information on configuring log sources, see the Log Sources User Guide .
For more information about the Nortel Application Switch, see
http://www.nortel.com/support.
Nortel Contivity
A SIEM Nortel Contivity DSM accepts Nortel Contivity events using syslog. SIEM
records all relevant events.
Before you configure SIEM to integrate with a Nortel Contivity device, you must:
Step 1
Log in to the Nortel Contivity command line interface (CLI).
Step 2
Type the following command:
enable <password>
Where
<password>
is the Nortel Contivity device administrative password.
Step 3
Type the following command:
config t
Step 4
Configure the logging information:
logging <IP address> facility-filter all level all
Where
<IP address>
is the IP address of the SIEM system.
Step 5
Type the following command to exit the command line:
exit
Step 6
You are now ready to configure the log source in SIEM.
To configure SIEM to receive events from a Nortel Contivity device:

From the Log Source Type drop-down list box, select the Nortel Contivity
VPN Switch option.
For more information on configuring log sources, see the Log Sources User Guide .
For more information about your Nortel Contivity device, see your vendor
documentation.
Nortel Ethernet
Routing Switch
2500/4500/5500
A SIEM Nortel Ethernet Routing Switch (ERS) 2500/4500/5500 DSM accepts
events using syslog. SIEM records all relevant events. Before configuring a Nortel
ERS 2500/4500/5500 device in SIEM, you must configure your device to send
syslog events to SIEM.
To configure the device to send syslog events to SIEM:
Step 1
Log in to the Nortel ERS 2500/4500/5500 user interface.
Step 2
Type the following commands to access global configuration mode:
ena