Paramètrer les logs sur ces différents éléments sur les switchs et les routeurs
Paramétrage des logs
Sur les Switches Cisco (swb - 192.168.99.14 / 192.168.99.13)
service timestamps log datetime msec localtime show-timezone
logging buffered 65536 informational
logging host 192.168.99.12
logging trap informational
login on-failure log
login on-success log
archive
log config
logging enable
logging size 200
notify syslog contenttype plaintext
hidekeys
spanning-tree logging
logging event link-status (Fa0/3,6,7,8,16,17,18,19,20,21,22)
logging event trunk-status (Fa0/23, Gi0/1, Gi0/2)
Sur le Routeur Cisco (r0 - 192.168.99.1)
service timestamps log datetime msec localtime show-timezone
logging buffered 65536 informational
logging host 192.168.99.12
logging trap informational
ip ssh logging events
ntp logging
archive
log config
logging enable
notify syslog contenttype plaintext
hidekeys
logging event link-status (Gi0/0/0, Gi0/0/1)
line vty 0 4
login local
transport input ssh
Zéro stockage sur le switch
! === TIMESTAMPS ===
service timestamps log datetime msec localtime show-timezone
service sequence-numbers
! === ZÉRO STOCKAGE LOCAL ===
no logging buffered
no logging console
no logging monitor
no archive log config
! === TRANSMISSION VERS LOGANALYZER ===
logging trap informational
logging source-interface Vlan999
logging on
! === AUTHENTIFICATION ===
login on-failure log
login on-success log
! === SPANNING-TREE ===
spanning-tree logging
! === ÉVÉNEMENTS PAR INTERFACE ===
interface FastEthernet0/3
logging event link-status
interface FastEthernet0/6
logging event link-status
interface FastEthernet0/7
logging event link-status
interface FastEthernet0/8
logging event link-status
interface FastEthernet0/16
logging event link-status
interface FastEthernet0/17
logging event link-status
interface FastEthernet0/18
logging event link-status
interface FastEthernet0/19
logging event link-status
interface FastEthernet0/20
logging event link-status
interface FastEthernet0/21
logging event link-status
interface FastEthernet0/22
logging event link-status
! === TRUNK STATUS ===
interface FastEthernet0/23
logging event trunk-status
interface GigabitEthernet0/1
logging event trunk-status
interface GigabitEthernet0/2
logging event trunk-status
Zéro stockage sur le routeur
! === TIMESTAMPS ===
service timestamps log datetime msec localtime show-timezone
service sequence-numbers
! === ZÉRO STOCKAGE LOCAL ===
no logging buffered
no logging console
no logging monitor
no archive log config
! === TRANSMISSION VERS LOGANALYZER ===
logging trap informational
logging source-interface GigabitEthernet0/0/0
logging on
! === SSH & NTP ===
ip ssh logging events
ntp logging
! === ÉVÉNEMENTS PAR INTERFACE ===
interface GigabitEthernet0/0/0
logging event link-status
interface GigabitEthernet0/0/1
logging event link-status
! === VTY SSH ===
line vty 0 4
login local
transport input ssh