VRF aware syslog

[saurabhatcisco]

Hello ,

Im trying to configure syslog on a CPE which has VRF_A configured on it.  Our requirement is to have this CPE send syslogs to two servers , one in customers own network which is part of global routing table and second is providers syslog server which is part of VRF_A.

As per my knowledhe I cannot specify any source interface for syslog through vrf and the source IP is picked up automatically by IOS from the interface which is part of the VRF. However when I have multiple interfacec in the same VRF which IP is picked up by IOS ?

Is there any way to acheive this ? Im attaching a diagram depicting the scenario .

I have put in below config on the device.

logging source-interface Loopback100

logging 3.3.3.3

logging host 69.26.45.139 vrf A

logging 2.2.2.2

[Ivan Krimmel · Accepted solution]

Saurabh,

the box will pick up the best interface according to the 'sh ip ro vrf A' output and send the syslogs off this interface. We currently hasve these two DDTS'es to address that:

CSCsu22476 Bug Details

Set source interface for VRF-aware syslog messages

Symptom: customer can not set the source interface for VRF-Aware Syslog messages.Conditions: Normal config mode. Workaround: Feature is not implemented.

and

CSCtn11379

Allow vrf syslogging from a specific source interface on routers

Symptom: VRF syslogging doesn't allow specifying the source interface. Conditions: VRF syslogging must be enabled. Syslogging to global routing table allows specification of the source interface.Workaround: None.

check them out on CCO for the list of fixed versions, should be working in 15th somewhere.

HTH,

Ivan.

[saurabhatcisco]

Thanks for the update Ivan , can you please elaborate about what you mean by "

best interface according to the 'sh ip ro vrf A' output" .  Does it mean the interface with highest IP address or something like that ?

[Ivan Krimmel]

Saurabh,

suppose you have two interfaces in vrf A - loopback0 and g0/1, which faces the PE router. Quite obvious that in order to reach the PE the box will source packets off the g0/1, according to the routing table, unless instructed differently. Makes sense?

Cheers,

Ivan.

[saurabhatcisco]

Ofcourse , thanks . That was really helpful.