Cisco logging events on a seperate VLAN

vin4510596 · ‎05-13-2013

Hi,

When I type #sh log it shows events happened to the switch. I plan on setting up a syslog server and would like the log events to be passed on it's own vlan. For example: want log events data be passed on vlan 20 and the syslog server connected to the port on the switch with vlan 20 set as a tagged port. I am trying to secure the data so it won't go thru the same vlan as the customers(vlan 1) use. Is that possible? If so, what is/are the command for it? Any suggestion would be greatly appreciated.

Thank you,

Vincent Lagrotteria

Bilal Nawaz · ‎05-13-2013

Hello,

Please see: http://www.cisco.com/en/US/docs/ios/netmgmt/command/reference/nm_09.html#wp1082864

logging source-interface xxxxxxx

logging host x.x.x.x

You can put an ACL to block your customer from coming to your vlan.

e.g. your customers are in vlan 1 and your syslog server is in vlan 20.

conf t

!

ip access-list extended PROTECT_LOG

deny ip any

permit ip any any

!

interface vlan 20

ip access-group PROTECT_LOG in

Hope this helps

Please rate useful posts & remember to mark any solved questions as answered. Thank you.