User guide

238
set system syslog log-violations [ off | on ]
Specifies whether violations are logged or ignored.
set system syslog log-accepted [ off | on ]
Specifies whether acceptances are logged or ignored.
set system syslog log-attempts [ off | on ]
Specifies whether connection attempts are logged or ignored.
Default syslog installation procedure
1. Access the router via telnet to the product from the private LAN. DHCP
server is enabled on the LAN by default.
2. The product’s stateful inspection feature needs to be enabled in order to
prevent TCP, UDP and ICMP packets destined to the router or the private
hosts.
This can be done by entering the CONFIG interface.
• Type
config
• Type the command to enable stateful inspection
set security state-insp eth B option on
• Type the command to enable the router to drop fragmented packets
set security state-insp eth B deny-fragments on
3. Enabling syslog:
• Type config
• Type the command to enable syslog
set system syslog option on
• Set the IP Address of the syslog host
set system syslog host-nameip <ip-addr>
(example: set system syslog host-nameip 10.3.1.1)
• Enable/change the options you require
set system syslog log-facility local1