<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic WLC TLS Syslog in Wireless</title>
    <link>https://community.cisco.com/t5/wireless/wlc-tls-syslog/m-p/3939278#M222</link>
    <description>&lt;P&gt;I'm implementing TLS Syslog for a MobilityExpress WLC (&lt;FONT&gt;AIR-AP1815I-E-K9&lt;/FONT&gt;/&lt;FONT&gt;8.8.120.0&lt;/FONT&gt;).&lt;/P&gt;&lt;P&gt;There is amazingly few documentation on this subject.&lt;/P&gt;&lt;P&gt;I did setup a debian rsyslog service on Debian 10, with a self-signed PKI.&lt;/P&gt;&lt;P&gt;I did setup the WLC with these commands:&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier"&gt;&lt;STRONG&gt;config logging syslog host &lt;/STRONG&gt;&lt;I&gt;s&lt;/I&gt;&lt;/FONT&gt;&lt;FONT face="courier new,courier"&gt;&lt;I&gt;yslog_server_ip&lt;/I&gt;&lt;/FONT&gt;&lt;STRONG&gt;&lt;FONT face="courier new,courier"&gt;&lt;BR /&gt;config logging syslog tls enable&lt;/FONT&gt;&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;FONT&gt;The WLC is Indeed sending encrypted logs, over TCP 6514.&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;I found&lt;FONT&gt; no additional setup on the WLC side (like TCP port, or PKI), but maybe there is a PKI support in the WLC?&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT&gt;By default, the Syslog server credentials are not verified by the WLC, and I found no way to enforce this scheck.&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;FONT&gt;&amp;nbsp;Any input/info is welcomed (like PKI settings on the WLC, or Syslog TLS options) !&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Mon, 05 Jul 2021 18:07:55 GMT</pubDate>
    <dc:creator>ComputerOne</dc:creator>
    <dc:date>2021-07-05T18:07:55Z</dc:date>
    <item>
      <title>WLC TLS Syslog</title>
      <link>https://community.cisco.com/t5/wireless/wlc-tls-syslog/m-p/3939278#M222</link>
      <description>&lt;P&gt;I'm implementing TLS Syslog for a MobilityExpress WLC (&lt;FONT&gt;AIR-AP1815I-E-K9&lt;/FONT&gt;/&lt;FONT&gt;8.8.120.0&lt;/FONT&gt;).&lt;/P&gt;&lt;P&gt;There is amazingly few documentation on this subject.&lt;/P&gt;&lt;P&gt;I did setup a debian rsyslog service on Debian 10, with a self-signed PKI.&lt;/P&gt;&lt;P&gt;I did setup the WLC with these commands:&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier"&gt;&lt;STRONG&gt;config logging syslog host &lt;/STRONG&gt;&lt;I&gt;s&lt;/I&gt;&lt;/FONT&gt;&lt;FONT face="courier new,courier"&gt;&lt;I&gt;yslog_server_ip&lt;/I&gt;&lt;/FONT&gt;&lt;STRONG&gt;&lt;FONT face="courier new,courier"&gt;&lt;BR /&gt;config logging syslog tls enable&lt;/FONT&gt;&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;FONT&gt;The WLC is Indeed sending encrypted logs, over TCP 6514.&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;I found&lt;FONT&gt; no additional setup on the WLC side (like TCP port, or PKI), but maybe there is a PKI support in the WLC?&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT&gt;By default, the Syslog server credentials are not verified by the WLC, and I found no way to enforce this scheck.&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;FONT&gt;&amp;nbsp;Any input/info is welcomed (like PKI settings on the WLC, or Syslog TLS options) !&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 05 Jul 2021 18:07:55 GMT</pubDate>
      <guid>https://community.cisco.com/t5/wireless/wlc-tls-syslog/m-p/3939278#M222</guid>
      <dc:creator>ComputerOne</dc:creator>
      <dc:date>2021-07-05T18:07:55Z</dc:date>
    </item>
  </channel>
</rss>

