Dell 6.2 Server User Manual


  Open as PDF
of 869
 
765 | ExternalServicesInterface DellPowerConnectW-SeriesArubaOS6.2 | User Guide
session-aclname
vlanvlan_id
For example:
ip access-listsessionfortinet
anyanysvc-httpredirectesi-groupfortinetdirectionbothblacklist
anyanyanypermit
user-roleguest
access-listsessionfortinet
Syslog Parser Domain and Rules
The following sections describe how to configure the syslog parser domain and rules for the route-mode example
using the WebUI and CLI.
Add a New Syslog Parser Domain in the WebUI
To add a new syslog parser domain for the routed example:
1. Click Add in the SyslogParser Domains tab (Advanced Services > External Services > Syslog Parser Domain).
The system displays the new domain view.
2. In the Domain Name text box, type the name of the domain to be added.
3. In the Server (IP Address) text box, type a valid IP address.
NOTE: You must ensure that you type a valid IP address, because the IP address you type is not automatically validated against the
list of external servers that has been configured.
4. Click <<Add.
5. Click Apply.
Adding a New Parser Rule in the WebUI
To add a new syslog parser rule for the route-mode example:
1. Click Add in the SyslogParserRules tab (Advanced Services > External Services > Syslog Parser Rule).
The system displays the new rule view.
2. In the Rule Name text box, type the name of the rule to be added (in this example, “forti_virus”).
3. Click the Enable checkbox to enable the rule.
4. In the Condition Pattern text box, type the regular expression to be used as the condition pattern. (In this
example, the expression “log_id=[0–9]{10}[]” searches for and matches a 10-digit string preceded by “log_id=”
and followed by one space.)
5. In the drop-down Match list, use the drop-down menu to select the match type (in this example, ipaddr).
6. In the Match Pattern text box, type the regular expression to be used as the match pattern (in this example,
“src=(.*)[]”).
7. In the drop-down Set list, select the set type (in this example, blacklist).
8. In the drop-down Parser Group list, select one of the configured parser domain names (in this example, “forti_
domain”).
9. Click Apply.
In the CLI
Use these CLI commands to define a syslog parser domain and the rule to be applied in the route-mode example
shown in Figure 347
esiparserdomainname
 previous next