Cisco 7604 Configuration Guide - Page 572

Configuring and Managing Syslog Messages Chapter 25 Monitoring the Firewall Services Module Step 4 (Optional) To continue to pass traffic when the TCP syslog server is down, enter the following command: hostname(config)# logging permit-hostdown Where the permit-hostdown keyword allows new network access sessions for a TCP-based syslog server. Sending Syslog Messages to an E-mail Address You can configure the FWSM to send some or all syslog messages to an e-mail address. When sent by e-mail, a syslog message appears in the subject line of the e-mail message. For this reason, we recommend configuring this option to notify administrators of syslog messages with high severity levels, such as critical, alert, and emergency. Note To start logging to an e-mail address you define in this procedure, be sure to enable logging for all output locations. See the "Enabling Logging to All Configured Output Destinations" section on page 25-2. To disable logging, see the "Disabling Logging to All Configured Output Destinations" section on page 25-3. To designate an e-mail address as an output destination, perform the following steps: Step 1 Step 2 Step 3 To specify the syslog messages to be sent to one or more e-mail addresses, enter the following command: hostname(config)# logging mail {severity_level | message_list} Where the severity_level argument specifies the severity levels of messages to be sent to the e-mail address. You can specify the severity level number (0 through 7) or name. For severity level names, see the "Severity Levels" section on page 25-20. For example, if you set the severity level to 3, then the FWSM sends syslog messages for severity levels 3, 2, 1, and 0. The message_list argument specifies a customized message list that identifies the syslog messages to send to the e-mail address. For information about creating custom message lists, see the "Filtering Syslog Messages with Custom Message Lists" section on page 25-14. The following example uses a message_list with the name "high-priority," previously set up with the logging list command: hostname(config)# logging mail high-priority To specify the source e-mail address to be used when sending syslog messages to an e-mail address, enter the following command: hostname(config)# logging from-address email_address For example: hostname(config)# logging from-address [email protected] Specify the recipient e-mail address to be used when sending syslog messages to an e-mail destination. You can configure up to five recipient addresses. You must enter each recipient separately. To specify a recipient address, enter the following command: hostname(config)# logging recipient-address e-mail_address [severity_level] If a severity level is not specified, the default severity level is used (error condition, severity level 3). 25-6 Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM OL-20748-01