Configure SNMP and SYSLOG

[mulbzh]

hello and sorry for my english,
In my entreprise we have only Cisco switch. We bought our first Alcatel switch. I just need some help for 3 things : syslog, snmp and http server.

1) i want to send log to remote server with IP 10.4.0.23. Is this commands below are good ?

Code: Select all

swlog output socket 10.4.0.23 remote command-log
swlog remote command-log enable
swlog console level info
command-log enable

2) In our Cisco switch, we use SNMP V1 on community name "public", but we secure the access to the SNMP with ACL. i d'like to do the same.
In cisco we use this commands :

Code: Select all

access-list 99 permit 172.16.0.25
access-list 99 deny   any log
snmp-server community public RO 99

First, how enable SNMP V1 on switch, like that ?

Code: Select all

user OV-READ password OV-READ-PW read-only all no auth
snmp community map public user OV-READ
snmp security no security

And how secure the access to SNMP for only one IP ?
'snmp station 172.16.0.25 OV-READ v1|v2 enable' ?

3) How to enable or disable http server on Alcatel ?
'http server' to active and 'no http server' to disable, right ?

thanks a lot

[silvio]

Hi,
1) your command sent the command-logs (instead normal log) to the syslog server. You only need:

Code: Select all

swlog output socket 10.4.0.23

2) SNMPv1 and v2 are no good idea - pls try to use v3
But your config is correct.
For limitation you can use similar policy like here https://www.alcatelunleashed.com/viewto ... on#p115218.
You need to add the protokoll snmp in the condition used for deny.
snmp station is the receiver of the traps - wrong for your needs.

3) http server is active per default
you commands are correct.

[mulbzh]

Ok thanks

so, this command 'swlog output socket 10.4.0.23' will send normal log and also command-logs ?

i tried the command but it seems i doesn't work

[silvio]

this command is only for the log (not command-log). The command is correct. Is the server reachable (ping from switch)? It uses udp port 514
Do you see the external server at "show swlog"?
best regards
Silvio

[mulbzh]

it is ok for syslog !