Enterasys Security Information and Event Manager, Configuration Manual

Page: 275 / 426

Configuring DSMs
Nortel VPN Gateway 259
For more information on configuring log sources, see the Log Sources User Guide .
For more information about Nortel TPS, see http://www.nortel.com/support.
Nortel VPN
Gateway
A SIEM Nortel VPN Gateway DSM accepts events using syslog. SIEM records all
relevant operating system (OS), system control, traffic processing, startup,
configuration reload, AAA, and IPsec events. Before configuring a Nortel VPN
Gateway device in SIEM, you must configure your device to send syslog events to
SIEM.
To configure the device to send syslog events to SIEM:
Step 1
Log in to the Nortel VPN Gateway command line interface (CLI).
Step 2
Type the following command:
/cfg/sys/syslog/add
Step 3
At the prompt, type the IP address of your SIEM system:
Enter new syslog host: <IP address>
Where
<IP address>
is the IP address of your SIEM system.
Step 4
Apply the configuration:
apply
Step 5
View all syslog servers currently added to your system configuration:
/cfg/sys/syslog/list
Step 6
You are now ready to configure the log source in SIEM.
To configure SIEM to receive events from a Nortel VPN Gateway device:

From the Log Source Type drop-down list box, select the Nortel VPN
Gateway option.
For more information on configuring log sources, see the Log Sources User Guide .
For more information about the Nortel VPN Gateway, see
http://www.nortel.com/support.