Filter
Top Products
Setting System Logging
3-10 PortMaster Configuration Guide
Setting the Loghost
To set the IP address of the loghost—the host to which the PortMaster sends syslog
messages—use the following command:
Command> set loghost Ipaddress
Note – Do not set a loghost at a location configured for on-demand connections,
because doing so keeps the connection up or brings up the connection each time a
syslog message is queued for the syslog host.
Setting the loghost’s IP address to 0.0.0.0 disables syslog from the PortMaster. This
change requires a reboot to become effective.
RADIUS accounting provides a more complete method for logging usage information.
Refer to the
RADIUS Administrator’s Guide
for more information on accounting.
Disabling and Redirecting Syslog Messages
By default, the PortMaster logs five types of events at the informational (info) priority
level using the authorization (auth) facility on the log host. You can disable logging of
one or more types of events and change the facility and/or priority of log messages.
To disable logging of a type of event, use the following command:
Command> set syslog Logtype disabled
Use the
Logtype
keyword described in Table 3-2 to identify the type of event you want to
disable—or enable again:
Table 3-2
Logtype Keywords
Logtype
Keyword Description
admin-logins !root and administrative logins.
user-logins Nonadministrative logins; you might want to disable this
logtype if you are using RADIUS accounting.
packet-filters Packets that match rules with the log keyword.
commands Every command entered at the command line interface.
termination More detailed information on how user sessions terminate.
✍