Manualshelf

Users Guide

ManualsBrandsDell ManualsAccess PlatformsSmartFabric OS10 Documentation
1291129212931294129512961297129812991300
Table Of Contents
c. 在 CONFIGURATION 模式下创建特定于系统日志记录的配置文件。
logging security-profile profile-name
其中 profile-name 是在步骤 2a 中通过 crypto security-profile profile-name 命令创建的 Syslog 安全配
置文件。您不能删除为日志记录服务器配置的加密服务器配置文件。
如果重新配置加密安全 profile-name，配置的系统日志 TLS 服务器将自动更新为使用新配置文件所用的新证书密钥对。
如果您重新配置分配给加密安全配置文件的证书，Syslog TLS 服务器将自动更新为使用新的证书密钥对。
如果从已配置的加密安全配置文件中删除证书，则通过 TLS 进行的系统日志记录将失败。与外部设备进行协议交换需要主机
证书。
4. 在 CONFIGURATION 模式下配置远程 TLS 服务器以接收系统消息。
logging server {ipv4–address | ipv6–address} tls [port-number]
[severity severity-level] [vrf {management | vrf-name]
示例：配置 Syslog over TLS
OS10# copy tftp://CAadmin:secret@172.11.222.1/cacert.pem home://cacert.pem
OS10# crypto ca-cert install home://cacert.pem
Processing certificate ...
Installed Root CA certificate
CommonName = Certificate Authority CA
IssuerName = Certificate Authority CA
OS10# show crypto ca-certs
--------------------------------------
| Locally installed certificates |
--------------------------------------
cacert.crt
OS10# crypto cert generate request cert-file home://clientreq.pem key-file home://
clientkey.pem cname "Top of Rack 6" altname "IP:10.0.0.6 DNS:tor6.dell.com" email
admin@dell.com organization "Dell EMC" orgunit Networking locality "Santa Clara" state
California country US length 2048
Processing certificate ...
Successfully created CSR file /home/admin/clientreq.pem and key
OS10# copy home://clientreq.pem scp://CAadmin:secret@172.11.222.1/clientreq.pem
OS10# copy scp://CAadmin:secret@172.11.222.1/clientcert.pem home://clientcert.pem
OS10# copy scp://CAadmin:secret@172.11.222.1/clientkey.pem home://clientkey.pem
OS10# crypto cert install cert-file home://clientcert.pem key-file home://clientkey.pem
Processing certificate ...
Certificate and keys were successfully installed as "clientcert.crt" that may be used in
a security profile. CN = 10.0.0.6
OS10# show crypto cert
--------------------------------------
| Installed non-FIPS certificates |
--------------------------------------
clientcert.crt
--------------------------------------
| Installed FIPS certificates |
--------------------------------------
OS10(config)# crypto security-profile dellprofile
OS10(config-sec-profile)# certificate clientcert
OS10(config-sec-profile)# exit
OS10(config)# logging security-profile dellprofile
OS10(config)# logging server 10.11.86.139 tls
OS10(config)# do show running-configuration logging
!
logging security-profile dellprofile
logging server 10.11.86.139 tls 514
OS10
故障储理 1291