Aruba Instant & Cloud Wi-Fi

Reply
Occasional Contributor II
Posts: 10
Registered: ‎12-22-2014

Multiple syslog servers for IAP?

How can I enter multiple syslog destination servers for the IAP 225? I'm currently sending syslog to Palo Alto firewall for authorization but also need syslog to send to our centrallized logging server. How can I add two? Does it support that?

Guru Elite
Posts: 20,410
Registered: ‎03-29-2007

Re: Multiple syslog servers for IAP?

You can only configure a single syslog server.  If you feel that another syslog server needs to be added, please submit that request at the Ideas Portal here:  https://arubanetworkskb.secure.force.com/cp/ideas/ideaList.apexp



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

MVP
Posts: 4,114
Registered: ‎07-20-2011

Re: Multiple syslog servers for IAP?

Why don't you point the instant using the Palo Alto network integration
http://www.arubanetworks.com/techdocs/Instant_40_Mobile/Advanced/Content/UG_files/RTLS_conf/panFirewallInt.htm

And point the syslog to your main syslog server

Sent from Outlook for iPhone
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor II
Posts: 10
Registered: ‎12-22-2014

Re: Multiple syslog servers for IAP?

Victor, great idea however the Palo Alto integration (which we're using as well) seems to be causing usernames (userids) to be the mac address when I show user ip mapping in the palo. It's pretty consistent in fact and when I compare to syslog user id mapping it's perfect.

 

Can't see *any* option to mod that on either side in fact using the palo integration feature. 

Occasional Contributor II
Posts: 10
Registered: ‎12-22-2014

Re: Multiple syslog servers for IAP?

Anyone know why Palo Alto integration sometimes uses MAC address as username?

Guru Elite
Posts: 8,036
Registered: ‎09-08-2010

Re: Multiple syslog servers for IAP?

Does the user-table show the MAC as the username?

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Occasional Contributor II
Posts: 10
Registered: ‎12-22-2014

Re: Multiple syslog servers for IAP?

Yes usertable on palo shows 80% of pan integration xmlapi username table are mac addressess and the rest proper usernames. When i switch to syslog integration its all proper usernames no mac addresses. This btw is iap pan integration - no clearpass.
Occasional Contributor II
Posts: 10
Registered: ‎12-22-2014

Re: Multiple syslog servers for IAP?

Any thoughts?
Search Airheads
Showing results for 
Search instead for 
Did you mean: