I got a new Cisco 3845 under my adminsitration. For some special events I do automated actions (e-mail's) from Cisco Works 2000.
One is if power supply fails. Problem now is, tha a ps fail message will be repeated every 20 seconds to syslog server - but local log on router only once.
Recently i have upgraded the IOS of ASA5550 (in HA mode) to 8.4.2 from 8.0.5, after OS upgrade we found that the syslog from thses firewalls are not getting captured/transfered to centralised syslog server. The server is reachable from the firewalls.
View 3 Replies View RelatedI received a syslog message on my cisco 3845 router, what is that message mean. 11 13:36:06.265 UTC: ASSERTION FAILED: file "../les/if_ng_dslsar_tx.c", line 385
View 2 Replies View RelatedI have a 3845 router (12.4(13r)T10) with ZBF. On my LAN there is a user who need to access a remote IPSEC VPN server. He is able to get the tunnel but afterwards he cannot connect to any service in the remote LAN. As I'm using zbf I think that I should inspect traffic from my LAN zone to EXT zone, There is a document that describe a solution to this? What IP adressess should I use?
View 2 Replies View RelatedI have a 3845 router (12.4(13r)T10) with ZBF. On my LAN there is a user who need to access a remote IPSEC VPN server. He is able to get the tunnel but afterwards he cannot connect to any service in the remote LAN. As I'm using zbf I think that I should inspect traffic from my LAN zone to EXT zone
View 3 Replies View Relatedi'm trying to setup a local DNS server to manage small office local-only domain names for our servers. i have the DNS working properly (resolving local machines and using the ISP dns if it can't). so i put the DNS server ip into the "Static DNS 1" field of the router settings. the other 2 static dns fields are empty.the problem is that the router is still using the ISP dns server as the primary and my local dns server as the secondary. i verify this in two places. first, if i go to the "status" tab, DNS 1 shows the ISP server while DNS 2 shows my local DNS server. secondly, if i connect to the wireless device with a linux-based machine, the /etc/resolv.conf file shows the nameserver ips in the same incorrect order.
View 1 Replies View RelatedI have a WCS working on version 7.0.172.0.Is there a way to send the alarms produced by WCS to another Syslog Server?
View 4 Replies View RelatedI am trying to setup syslog server on LMS 4.0.Everything seems to be working fine but I have a lot of stragne logs in my syslog.log file.Every single day I receive logs like :
Mar 05 09:31:03 127.0.0.1 100: <30> dmgt[1136]: 3007(I):Started application(1015) "e:CSCOpxincwjava.exe -cw:jre lib/jre -cp e:CSCOpxMDC omcatsharedlibMICE.jar;e:CSCOpxMDC omcatsharedlibNATIVE.jar;e:CSCOpxMDC omcatsharedlibjdom.jar;e:CSCOpxMDC omcatsharedlibxalan.jar;e:CSCOpxMDC omcatsharedlibxerces.jar;e:CSCOpxMDC omcatcommonlibservlet.jar;e:CSCOpxMDC omcatsharedlibcastor-0.9.5.jar;e:CSCOpxMDC omcatsharedlibcastor-0.9.5-xml.jar;e:CSCOpxlibclasspath;e:CSCOpxwwwclasspath;wwwclasspathvbjorb.jar;MDC omcatwebappsupmWEB-INFclasses;libjrelibendorsedjacorb.jar;MDC omcatwebappsupmWEB-INFlibctm.jar;MDC omcatwebappsupmWEB-INFliblog4j.jar;MDC omcatwebappsupmWEB-INFlibjep-3.2.0.jar;MDC omcatwebappsupmWEB-
[code]....
I dont want to get any logs from 127.0.0.1. Is it possible to filter out logs from server ?
I need to setup a syslog server for PIX w/ 6.2 and was hoping to get detailed instruction how to go about it. I would like exact syntax w/ an example on the pix and any configuration on the computer that will be receiving the log info. I have downloaded tftpd32 onto computer
View 1 Replies View RelatedI would like to know whether LMS 4.1 (local server mode) has the ability to relay syslog messages received from devices to an external syslog server? If so, how do I configure such?
From reading the document and going through the LMS 4.1 GUI, it appears that it could receive and forward messages but only between LMS system (ie. multi server mode) as SSL is required.
I want to forward syslog messages that I receive in my Cisco Works server to another server,what is the best way to accomplish this. I'm running LMS3.2 on Solaris 10.
View 3 Replies View RelatedI'm having an issue with the syslog.
My configuration is:
LAN A (RV042)<-> GW to GW tunnel <-> (RV082) LAN B
On LAN A, I got a NAS with a syslog server. On the RV042, I've set the parameters for the syslog server, and it's working fine. On the RV082, I've set the same parameters and noting is happening.
As troubleshooting, I've done the following:
-On the RV082, I can ping the NAS without problems.
-On the RV082, I've set my computer IP adress as syslog server IP and with packet analyser, I not seing any UDP packets.
Is there an .ISO file for installing on Windows Server20888SR2 ?
View 1 Replies View RelatedI have a WAP4410N access Point, firmware 2.0.1.0. I have configured a Kiwi syslog server to get the log from the WAP4410N, but the log information obtained is just the "standard event log" and not the detailed log (every connection source and destination IP address,IP server,and number of bytes transferred) , according to the manual of the access point.what I have to do? firmware update? another syslog server?
View 1 Replies View RelatedHow to set up logging of commands on syslog server ? (cisco nexus 7010)
View 2 Replies View RelatedWe use multiple ASA 5500/5580 cluster systems running 8.3 software versions.Actually we send all our FW syslog data to a SIEM appliance in a DMZ on a remote firewall (non-asa). Recently we suffered a strange incident while implementing a new SIEM collection station now situated in a dmz that is located on one of the ASA contexts. We redirected the syslog streams to the new client for one of the contexts on the ASA cluster that holds the new SIEM agent DMZ..since we did this and redirected the syslog we see double traffic and spoofing errors on that context
a/ the ASA keeps sending out the syslog traffic to the OLD SIEM agent server ip (there is however no trace of its ip in the config)
b/ the traffic leaving the interconnection interface towards the OLD SIEM agent gets a SPOOFING error on the traffic
c/ strangely the data gets also correctly forwarded to the new SIEM collection stations.
We started out with redirecting traffic on only one of the 5 contexts to the new environment and kept logging the others to the old system.I finally got out of the issue by reconfiguring al the other contexts to forward their syslog towards the same new server , since that moment we no longer have the double logging and spoofing error , all syslog traffic goes correctly to the new SIEM agent. It looked like some remenants of the old syslog config remainded on the asa event after deleting and introducing a new config line (we used the asdm to execute the action) as said either it kept the old config or it looked in the other context and "decided" to keep sending to the old server also mentioned in that syslog can find the behaviour in any buglists either way.
i'm about to configure a syslog server to receive syslog messages from a Cisco ASA5510 and being it a one week test I was wondering how much space should I allocate on the machine hosting the tool (kiwi syslog). I see that the ASA fills the internal syslog buffer to 4MB and then it overrides it. How many messages would those 4MB be?
View 2 Replies View RelatedI am sending TACACS administration logging to a syslog server. When the messages show up on the syslog server, they are 5 hours ahead of the actual time. Time on the ACS is correct - local logging shows the correct time. Time on the syslog server is correct...all other devices/systems sending syslog messages to it are coming through with the correct time. why the ACS syslog messages would be 5 hours ahead?
View 3 Replies View RelatedAdd the ability to send syslog events to multiple syslog servers in the SA500 Series routers. I know the functionality is currently in the RV220W because we utilized it. It would be great if you could configure the syslog servers by event type as well. For example, being able to send the kernel events to syslog server A, and all other events to syslog server B.
View 0 Replies View RelatedI can't seem to send config changes to our syslog server on a 2950, I'm fine with 2960's and 3750's. The Cisco 2955 is using the latest IOS c2955-i6k2l2q4-mz.121-22.EA14.bin.
Here is what I have added:
logging buffered 64000 debugging
logging console informational
logging monitor informational
[Code].....
The only sylog message I get is "Configured from console by username on vty0 (10.1.1.35)
Can i send "show conn" to syslog server? for example:
[code]...
ESTAB5082
I'm looking to configure a syslog server for all of my cisco device logging. I've had a look at CNA and can't find any options to define a syslog server for my switches.
What's the best way to define a syslog server and the severity of the notifications? Also, i'm looking to clear all previous Syste mmessages fon my devices?
I'm trying to view the logs from a Cisco 857W router to a workstation running the Kiwi Syslog server. what I've done is the following:
Config term
Logging on
Logging source-interface BVI1
Logging Facility Local7 (or any other facility you want to allocate for this router.)
Logging [IP Address or Hostname of machine running Kiwi Syslog Server]
End
I see noting on the syslog server. Although I can see the log information on the router Also is there a command to stop the logging from generating or is this on by default.
I have installed a switch (3560) that was from another site and changed all it's config and hostname etc and it is now live, however the syslog messages still see the old hostname, what could be causing this?
View 3 Replies View RelatedI have configured my 2951 router to send logs to my Kiwi syslog server like below.
#logging 10.20.20.52
But I am not receiving any logs from my router, the same has configured on my asa5520 and its sending logs.
I have recently setup Splunk to receive my syslog messages from my ASA 5510. In the past I used kiwi without observing this issue, but I needed more features than kiwi had available. Anyway, anytime I stop the splunk service my asa does not allow any outbound connections to be established.
View 2 Replies View RelatedI have the following commands on my Cisco 3845 router running IOS version 12.2(24)T4:
ntp server 192.168.1.1 prefer
ntp server 192.168.1.2
ntp source loopback0
I see that the router is sending out NTP version 4; however, my NTP server is configured to accept only NTP version 3. Anything other than version 3 will be dropped.
How do I go about to configure NTP on the Cisco IOS router to send out only version 3 and not version 4?
I am using Solawinds syslog and trying to get our Cisco routers send syslogs to our syslog server. I followed the procedure on Configuring Cisco Devices to Use a Syslog Server from [URL] Our Cisco swtches are all sending syslog messages but not the routers. I compared the config with our access switches but can't seem to find the problem:
Sample router config:
service nagleno service padservice tcp-keepalives-inservice tcp-keepalives-outservice timestamps debug datetime msec localtime show-timezoneservice timestamps log datetime msec localtime show-timezoneservice password-encryption!hostname WWF-RT1boot-start-markerboot-end-marker!security authentication failure rate 10 logsecurity passwords min-length 8logging buffered 4096logging rate-limit all 10logging console critical!aaa new-model!!
[Code] .......
is there a command that prevents the router from sending the syslog to the server?
We have multiple RA VPN groups on a 3845 router.RADIUS authentication is currently happening between the 3845 and a single Windows 2008 server. We have a specific windows group that AD users are members of, and they are allowed to connect via VPN.
I'm creating a new RA VPN Group, which should only allow different AD users. Is it possible to create another RADIUS association to the same server, or do I need to authenticate against a different Windows server?
I am trying to configure two 3845 routers to act as dhcp server and dhcp relay. Clients are connected to the router that relays all dhcp requests to the vrf instance which is used to connect it to the router wich is running dhcp server.
Router1
ip vrf dhcp_dns
rd 8:1
int gi0/0
ip vrf forwarding dhcp_dns
ip address 192.168.200.5 255.255.255.248
[code]...
So far I can see dhcp requests coming from the R1 and dhcp server on R2 replies with the dhcp offer but PC is not getting any ip.
I have a 3845 router. Setup SSH Version 2generated rsa keys (1024)set login localtransport input ssh and telnet is enabled since I can't get ssh connection working When I connect using SSH, I get the following error. server refused authentication protocol.
View 21 Replies View RelatedIs there any physical or technical diferrences between PWR-3845 AC/2 and PWR-3845 AC? We are trying to order replacement parts and wondering if PWR-3845 AC is for one power supply and AC/2 means you get two with one order?
View 1 Replies View RelatedIs there any physical or technical diferrences between PWR-3845 AC/2 and PWR-3845 AC? We are trying to order replacement parts and if PWR-3845 AC is for one power supply and AC/2 means you get two with one order.
View 1 Replies View Related