Controllerless Networks

Upcoming community maintenance Oct. 27th through Oct. 29th
For more info click here
Reply
Highlighted
Occasional Contributor II

Multiple syslog servers for IAP?

How can I enter multiple syslog destination servers for the IAP 225? I'm currently sending syslog to Palo Alto firewall for authorization but also need syslog to send to our centrallized logging server. How can I add two? Does it support that?


Accepted Solutions
Highlighted
Guru Elite

Re: Multiple syslog servers for IAP?

You can only configure a single syslog server.  If you feel that another syslog server needs to be added, please submit that request at the Ideas Portal here:  https://arubanetworkskb.secure.force.com/cp/ideas/ideaList.apexp


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Video Knowledge Base
Remote Access Point Solution Guide
ArubaOS Consolidated Release Notes
ArubaOS 8 ViA VPN Solution Guide

View solution in original post


All Replies
Highlighted
Guru Elite

Re: Multiple syslog servers for IAP?

You can only configure a single syslog server.  If you feel that another syslog server needs to be added, please submit that request at the Ideas Portal here:  https://arubanetworkskb.secure.force.com/cp/ideas/ideaList.apexp


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Video Knowledge Base
Remote Access Point Solution Guide
ArubaOS Consolidated Release Notes
ArubaOS 8 ViA VPN Solution Guide

View solution in original post

Highlighted
MVP Expert

Re: Multiple syslog servers for IAP?

Why don't you point the instant using the Palo Alto network integration
http://www.arubanetworks.com/techdocs/Instant_40_Mobile/Advanced/Content/UG_files/RTLS_conf/panFirewallInt.htm

And point the syslog to your main syslog server

Sent from Outlook for iPhone
Thank you

Victor Fabian
Lead Mobility Architect @WEI
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Highlighted
Occasional Contributor II

Re: Multiple syslog servers for IAP?

Victor, great idea however the Palo Alto integration (which we're using as well) seems to be causing usernames (userids) to be the mac address when I show user ip mapping in the palo. It's pretty consistent in fact and when I compare to syslog user id mapping it's perfect.

 

Can't see *any* option to mod that on either side in fact using the palo integration feature. 

Highlighted
Occasional Contributor II

Re: Multiple syslog servers for IAP?

Anyone know why Palo Alto integration sometimes uses MAC address as username?

Highlighted
Moderator

Re: Multiple syslog servers for IAP?

Does the user-table show the MAC as the username?


If this response is more than 1 year old, it may no longer be accurate. Please consult official Aruba documentation, TAC or your Aruba SE.

| Aruba Alumni | @timcappalli | timcappalli.me |

Highlighted
Occasional Contributor II

Re: Multiple syslog servers for IAP?

Yes usertable on palo shows 80% of pan integration xmlapi username table are mac addressess and the rest proper usernames. When i switch to syslog integration its all proper usernames no mac addresses. This btw is iap pan integration - no clearpass.
Highlighted
Occasional Contributor II

Re: Multiple syslog servers for IAP?

Any thoughts?
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: