Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Cisco IOS

 

You can integrate Cisco IOS series devices with JSA.

The Cisco IOS DSM for JSA accepts Cisco IOS events by using syslog. JSA records all relevant events. The following Cisco Switches and Routers are automatically discovered as Cisco IOS series devices, and their events are parsed by the Cisco IOS DSM:

  • Cisco 12000 Series Routers

  • Cisco 6500 Series Switches

  • Cisco 7600 Series Routers

  • Cisco Carrier Routing System

  • Cisco Integrated Services Router.

Note

Make sure all Access Control Lists (ACLs) are set to <LOG>.

Configuring Cisco IOS to Forward Events

You can configure a Cisco IOS-based device to forward events.

Take the following steps to configure your Cisco device:

  1. Log in to your Cisco IOS Server, switch, or router.
  2. Type the following command to log in to the router in privileged-exec:

    enable

  3. Type the following command to switch to configuration mode:

    conf t

  4. Type the following commands:

    logging <IP address>

    logging source-interface <interface>

    Where:

    • <IP address> is the IP address of the JSA host and the SIM components.

    • <interface> is the name of the interface, for example, dmz, lan, ethernet0, or ethernet1.

  5. Type the following to configure the priority level:

    logging trap warning

    logging console warning

    Where warning is the priority setting for the logs.

  6. Configure the syslog facility:

    logging facility syslog

  7. Save and exit the file.
  8. Copy the running-config to startup-config by typing the following command:

    copy running-config startup-config

    You are now ready to configure the log source in JSA.

    The configuration is complete. The log source is added to JSA as Cisco IOS events are automatically discovered. Events that are forwarded to JSA by Cisco IOS-based devices are displayed on the Log Activity tab of JSA.

Configuring a Log Source

JSA automatically discovers and creates a log source for syslog events from Cisco IOS.

The following configuration steps are optional. To manually configure a log source for Cisco IOS-based devices, take the following steps:

  1. Log in to JSA.
  2. Click the Admin tab.
  3. On the navigation menu, click Data Sources.

    The Data Sources pane is displayed.

  4. Click the Log Sources icon.

    The Log Sources window is displayed.

  5. Click Add.

    The Add a log source window is displayed.

  6. In the Log Source Name field, type a name for your log source.
  7. In the Log Source Description field, type a description for the log source.
  8. From the Log Source Type list, select one of the following devices:
    • Cisco IOS

    • Cisco 12000 Series Routers

    • Cisco 6500 Series Switches

    • Cisco 7600 Series Routers

    • Cisco Carrier Routing System

    • Cisco Integrated Services Router

  9. Using the Protocol Configuration list, select Syslog.

    The syslog protocol configuration is displayed.

  10. Configure the following values:

    Table 1: Syslog Parameters

    Parameter

    Description

    Log Source Identifier

    Type the IP address or host name for the log source as an identifier for events from your Cisco IOS-based device.

  11. Click Save.
  12. On the Admin tab, click Deploy Changes.

    The configuration is complete.