配置向日志主机输出Log信息示例
组网需求
如图3-9所示,Router分别与四个日志主机相连且路由可达。网络管理员希望不同的日志主机接收不同类型和严重级别的Log信息,同时,希望能够保证日志主机接收Log信息的可靠性,以便对设备不同模块产生的信息进行实时监控。
配置思路
采用如下思路配置Router:
使能信息中心功能。
配置Router向日志主机Server1发送由FIB模块和IP模块产生、严重等级为notification的Log信息;Server3作为Server1的备份设备。Router向日志主机Server2发送由PPP模块和AAA模块产生、严重等级为warning的日志信息;Server4作为Server2的备份设备。
在Server端配置日志主机,以实现网络管理员能够在日志主机上接收Router产生的Log信息。
操作步骤
- 使能信息中心功能
<Huawei> system-view [Huawei] sysname Router [Router] info-center enable
- 配置向日志主机发送Log信息的信息通道和输出规则
# 命名信息通道。
[Router] info-center channel 6 name loghost1 [Router] info-center channel 7 name loghost2
# 配置Log信息输出到日志主机所使用的信息通道。
[Router] info-center loghost 10.1.1.1 channel loghost1 [Router] info-center loghost 10.2.1.1 channel loghost2 [Router] info-center loghost 10.1.1.2 channel loghost1 [Router] info-center loghost 10.2.1.2 channel loghost2
# 配置向日志主机通道输出Log信息的规则。
[Router] info-center source fib channel loghost1 log level notification [Router] info-center source ip channel loghost1 log level notification [Router] info-center source ppp channel loghost2 log level warning [Router] info-center source aaa channel loghost2 log level warning
- 配置发送日志信息的源接口
# 配置发送Log信息的源接口。
[Router] info-center loghost source gigabitethernet 1/0/0
- 在Server端配置日志主机
# 设备会产生大量的Log信息,而设备本身的存储空间相对有限,就需要配置日志主机实现对设备Log信息的收集。
# 日志主机可以是安装UNIX或LINUX操作系统的主机,也可以是安装第三方日志软件的主机,具体配置步骤请参见相关手册。
- 验证配置结果
# 查看已经配置的日志主机。
<Router> display info-center Information Center: enabled Log host: the interface name of the source address:GigabitEthernet1/0/0 10.1.1.1, channel number: 6, channel name: loghost1 language: english, host facility: local7 10.2.1.1, channel number: 7, channel name: loghost2 language: english, host facility: local7 10.1.1.2, channel number: 6, channel name: loghost1 language: english, host facility: local7 10.2.1.2, channel number: 7, channel name: loghost2 language: english, host facility: local7 Console: channel number : 0, channel name : console Monitor: channel number : 1, channel name : monitor SNMP Agent: channel number : 5, channel name : snmpagent Log buffer: enabled max buffer size: 1024, current buffer size: 512 current messages: 218, channel number: 4, channel name: logbuffer dropped messages: 0, overwritten messages: 0 Trap buffer: enabled max buffer size: 1024, current buffer size: 256 current messages: 256, channel number: 3, channel name: trapbuffer dropped messages: 0, overwritten messages: 150 Logfile: channel number: 9, channel name: channel9, language: English Information timestamp setting: log - date, trap - date, debug - boot Sent messages = 683, Received messages = 682
# 在网管端查看接收到的Log信息。(略)。
配置文件
- Router的配置文件
# info-center channel 6 name loghost1 info-center channel 7 name loghost2 info-center source FIB channel 6 log level notification info-center source IP channel 6 log level notification info-center source PPP channel 7 log level warning info-center source AAA channel 7 log level warning info-center loghost source GigabitEthernet1/0/0 info-center loghost 10.1.1.1 channel 6 info-center loghost 10.2.1.1 channel 7 info-center loghost 10.1.1.2 channel 6 info-center loghost 10.2.1.2 channel 7 # interface GigabitEthernet1/0/0 undo portswitch ip address 172.16.0.1 255.255.255.0 # ip route-static 10.1.1.0 255.255.255.0 172.16.0.2 ip route-static 10.2.1.0 255.255.255.0 172.16.0.2 # return