topic Re: Syslog to locacl host in Network Security

Syslog to locacl host

mkkeyan — Mon, 11 Mar 2019 16:30:29 GMT

Hi MY network setup

ISP terminated in router ---> ASA5510--L3(3560)-L2 -LAN

Objective:

Syslog needs to received from router to local machine,

I have added the route in router, and excluding NAT in ASA. From local machine i am able reach router , but from router unable to reach local machine (or syslog server)

pl help

Re: Syslog to locacl host

Collin Clark — Fri, 23 Oct 2009 12:56:15 GMT

Can you post the ASA statics and ACL? What do the logs in the ASA state?

Re: Syslog to locacl host

mkkeyan — Fri, 23 Oct 2009 13:33:19 GMT

no static in ASA

Only acl and nonat acl

access-list internet-access-list permit ip 10.40.50.0 255.255.255.0 host 220.225.XXX.XXX

access-list noant permit ip 10.40.50.0 255.255.255.0 host 220.225.XXX.XXX

internet-access-list -binding inside interface

nonat-access-list with nat 0

thanks

Re: Syslog to locacl host

Collin Clark — Fri, 23 Oct 2009 13:42:58 GMT

Relative information is required if you want help. Here's an example.

access-list SYSLOG_SERVER extended permit ip host 10.10.20.17 host [router IP]

static (inside,outside) 10.10.20.17 access-list SYSLOG_SERVER tcp 65535 10000

access-list outside_access_in extended permit udp host [router IP] host 10.10.20.17 eq syslog

In the router you will need a static route to the inside host pointing to your ASA.

ip route 10.10.20.17 255.255.255.255 [ASA public IP]

Re: Syslog to locacl host

mkkeyan — Fri, 23 Oct 2009 14:03:43 GMT

thank you very much