Cisco VPN 3000 Concentrator
The Cisco VPN 3000 Concentrator DSM for JSA accepts Cisco VPN Concentrator events by using syslog.
JSA records all relevant events. Before you can integrate with a Cisco VPN concentrator, you must configure your device to forward syslog events to JSA.
To configure your Cisco VPN 3000 Concentrator:
- Log in to the Cisco VPN 3000 Concentrator command-line interface (CLI).
- Type the following command to add a syslog server to your
set logging server <IP address>
Where <IP address> is the IP address of JSA or your Event Collector.
- Type the following command to enable system messages to
be logged to the configured syslog servers:
set logging server enable
- Set the facility and severity level for syslog server
set logging server facility <server_facility_parameter>
set logging server severity <server_severity_level>
The configuration is complete. The log source is added to JSA as Cisco VPN Concentrator events are automatically discovered. Events that are forwarded to JSA are displayed on the Log Activity tab of JSA.
Syslog Log Source Parameters for Cisco 3000 Concentrator
If JSA does not automatically detect the log source, add a Cisco 3000 Concentrator log source on the JSA Console by using the syslog protocol.
When using the syslog protocol, there are specific parameters that you must use.
The following table describes the parameters that require specific values to collect syslog events from Cisco 3000 Concentrator devices:
Table 1: Syslog Log Source Parameters for the Cisco 3000 Concentrator DSM
Log Source type
Cisco 3000 Concentrator
Log Source Identifier
Type the IP address or host name for the log source.
The identifier helps you determine which events came from your Cisco 3000 Concentrator devices.