Syslog over TLS 1.2 CISCO 2960

[TEAM_ADP_CDGBS]

Hello guys,

I can't figure out to find information about doing Syslog over TLS witth Cisco 2960X or 2960X or 2960CX or 3850 ?

Have you information and configuration about this ?

THX

[Kasun Bandara]

@TEAM_ADP_CDGBS hi, check if below posts's link helpfull.

https://community.cisco.com/t5/network-security/how-to-configure-syslog-tls-for-syslog-server-for-cisco-switch/td-p/5212944

[MHM Cisco World]

https://community.cisco.com/t5/networking-knowledge-base/configuring-syslog-tls-on-catalyst-9000/ta-p/4664499

Also check this guide' it for 9K but I think you can apply same command for 3k.

MHM

[TEAM_ADP_CDGBS]

Thanks guy,

but the command doesn't exist.

logging tls-profile

[MHM Cisco World]

if this command not accept then these SW not support Syslog over TLS
instead you can run IPsec (if also available) and pass syslog inside the VPN tunnel 

it give you same security as Syslog Per TLS

MHM 

[Flavio Miranda]

@TEAM_ADP_CDGBS 

 In 2019 it was not supported even in Catalyst 9K. Now, it is supported in Catalyst 9K but they are not in older switches. 

https://community.cisco.com/t5/network-security/secure-syslog-using-ssl-tls-on-cisco-switches-router-and/td-p/3690273