Enterasys Security Information and Event Manager, Руководство по настройке

Страница: 109 / 426

Configuring DSMs
Enterasys XSR Security Router 93
- 8: Debugging messages
<description>
is a description of the facility/server. This is an optional field.
<port>
is the default UDP port that the client uses to send messages to the
server. If not specified, the default value configured with the set logging default
command is applied. This is an optional field.
<enable | disable>
enables or disables this facility/server configuration. This is
an optional field. If state is not specified, the server will not be enabled or disabled.
Step 3
You are now ready to configure the log source in SIEM.
To configure SIEM to receive events from an Enterasys Stackable and Standalone
Switch device:

From the Log Source Type drop-down list box, select one of the following
options: Enterasys Stackable and Standalone Switches, Enterasys
A-Series, Enterasys B2-Series, Enterasys B3-Series, Enterasys
C2-Series, Enterasys C3-Series, Enterasys D-Series, Enterasys G-Series,
or Enterasys I-Series .
For more information on configuring log sources, see the Log Source Users Guide .
For more information about your Enterasys Stackable and Standalone Switches,
see your vendor documentation.
Enterasys XSR
Security Router
The Enterasys XSR Security Router DSM accepts events using syslog. SIEM
records all relevant events. Before configuring an Enterasys XSR Security Router
in SIEM, you must configure your device to send syslog events to SIEM.
To configure the device to send syslog events to SIEM:
Step 1
Using Telnet or SSH, log in to the XSR Security Router command line interface.
Step 2
Type the following command to access config mode:
enable
config
Step 3
Type the following command:
logging <IP address> low
Where
<IP address>
is the IP address of your SIEM system.
Step 4
Exit from config mode.
Step 5
Save the configuration:
exit
copy running-config startup-config
Step 6
You are now ready to configure the log sources in SIEM.