Logging on 2950 Switch

[duster123]

How do i enable logging on my 2950 switch? I have Kiwi syslog i want my switch to send logs to my syslog. Thanks

 

[ADB100]

switch(config)#logging (hostname or ip address)
switch(config)#logging trap (level 0 thru 7)
switch(config)#logging on

http://www.cisco.com/en/US/products...figuration_guide_chapter09186a00801cde77.html

HTH

Andy

 

[duster123]

should the IP address be the IP of the Switch or to the deice i want to send my logging information?

 

[vipergg]

Ip address of your log server...

 

[ADB100]

Whoops, yes the IP address of your Syslog Server

 

[duster123]

I enabled the snmp trap with this command: snmp-server enable trap. and i still cant get my kiwi to view the switch's logs. when i open kiwi it says it says unable to open udp port also i try to point it to the switch and nothing shows up. I even try to print logs to the terminal and that doesnt work either. Below is my sh logging file. What i want to accomplish is to send all messages to my Terminal screen when i log in with telnet and also to send it to my kiwi syslog on ip 9.9.9.4. Thanks

AASH2950#sh logging
Syslog logging: enabled (0 messages dropped, 0 messages rate-limited, 0 flushes,
0 overruns)
Console logging: level debugging, 17 messages logged
Monitor logging: disabled
Buffer logging: level debugging, 17 messages logged
Exception Logging: size (4096 bytes)
File logging: disabled
Trap logging: level notifications, 17 message lines logged
Logging to 9.9.9.4, 5 message lines logged

Log Buffer (4096 bytes):

00:00:15: %SPANTREE-5-EXTENDED_SYSID: Extended SysId enabled for type vlan
000002: *Mar 1 00:00:20: %SYS-5-CONFIG_I: Configured from memory by console
000003: *Mar 1 00:00:20: %SYS-5-RESTART: System restarted --
Cisco Internetwork Operating System Software
IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(13)EA1c, RELEASE SOFTWARE
(fc1)
Copyright (c) 1986-2003 by cisco Systems, Inc.
Compiled Tue 24-Jun-03 17:31 by yenanh
000004: *Mar 1 00:00:21: %LINK-5-CHANGED: Interface Vlan2, changed state to adm
inistratively down
000005: *Mar 1 00:00:22: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan2,
changed state to down
000006: *Mar 1 00:00:24: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed sta
te to up
000007: *Mar 1 00:00:25: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEt
hernet0/1, changed state to up
000008: *Mar 1 00:00:53: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1,
changed state to up
000009: *Mar 1 00:13:19: %SYS-5-CONFIG_I: Configured from console by vty0 (9.9.
9.4)
000010: *Mar 1 00:15:48: %SYS-5-CONFIG_I: Configured from console by vty0 (9.9.
9.4)
000011: *Mar 1 00:20:45: %SYS-5-CONFIG_I: Configured from console by vty0 (9.9.
9.4)
000012: *Mar 1 00:22:31: %SYS-5-CONFIG_I: Configured from console by vty0 (9.9.
9.4)
000013: *Mar 1 00:24:02: %SYS-5-CONFIG_I: Configured from console by vty0 (9.9.
9.4)
000014: *Mar 1 00:44:37: %SYS-5-CONFIG_I: Configured from console by vty0 (9.9.
9.4)
000015: *Mar 1 00:47:26: %SYS-5-CONFIG_I: Configured from console by vty0 (9.9.
9.4)
000016: *Mar 1 00:49:18: %SYS-5-CONFIG_I: Configured from console by vty0 (9.9.
9.4)
000017: *Mar 1 00:53:45: %SYS-5-CONFIG_I: Configured from console by vty0 (9.9.
9.4)
AASH2950#

 

[duster123]

Sorry this is my new sh logging command after i enable monitoring. there are messages showing on the console but nothing on the terminal or kiwi syslog


AASH2950#sh logging
Syslog logging: enabled (0 messages dropped, 0 messages rate-limited, 0 flushes,
0 overruns)
Console logging: level debugging, 18 messages logged
Monitor logging: level debugging, 0 messages logged
Buffer logging: level debugging, 18 messages logged
Exception Logging: size (4096 bytes)
File logging: disabled
Trap logging: level notifications, 18 message lines logged
Logging to 9.9.9.4, 6 message lines logged

Log Buffer (4096 bytes):

00:00:15: %SPANTREE-5-EXTENDED_SYSID: Extended SysId enabled for type vlan
000002: *Mar 1 00:00:20: %SYS-5-CONFIG_I: Configured from memory by console
000003: *Mar 1 00:00:20: %SYS-5-RESTART: System restarted --
Cisco Internetwork Operating System Software
IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(13)EA1c, RELEASE SOFTWARE
(fc1)

 

[vipergg]

Not sure what you want , if you telnet in and do a show logg it should be no different than if you do a show logg from the console port . Snmp traps are different than syslogs . To see if it sending the logs you could debug on the router and see if it is sending the log info , if so then I would start looking at the kiwi config . There really is not much to configure for sysylogs just point it ot the address of the kiwi .

 

[ADB100]

when i open kiwi it says it says unable to open udp port

This is probably your problem.....

Syslog by default uses UDP port 514, if you try and launch the Kiwi syslogger and it says the port is in use then I assume you have another syslog application listening on that port (or another application that has been configured -rightly or wrongly- to bind to that port?

When you say you try to print logs to the terminal do you mean the Telnet/SSH session? if thats the case you need to enable 'monitor logging' since it is currently disabled:

switch(config)#logging monitor debugging

It should log to the serial console since this is enabled.

HTH

Andy

 

[duster123]

Thanks I reinstalled kiwi on a different computer and it worked. Maybe my windows 2003 server is blocking some kind of UDP port.

 

[duster123]

Cisco has a table that gives you levels of logging meassages. 0-7. if i want all messages to be sent to logging do i select 7? will that include all the lower levels too?

 

[vipergg]

Yes 7 is all messages including debugging messages.