VLAN ACL Logging

[chong.eric]

Hi

To meet PCI DSS requirement, I'm planning to implement VLAN ACL to separate the PCI syteam and non PCI system in same VLAN/subnet.  

Question - how can l configure logging on VLAN ACL?  Can the log send to SIEM / log management ?

Regards

Eric

[Seb Rupik]

Hi there,

For each entry on your ACL add the log keyword to the end.

Then add the following confiuration

!
logging buffered 64000 info
logging host <syslog_siem_server>
logging source-interface <management_interface>
!

cheers,

Seb