Cisco Systems DL-2159-05 manual Should Syslog Messages use the Cisco Emblem Format?

Chapter 7 Configuring Other Settings

Event Notification Setup

Should Syslog Messages use the Cisco EMBLEM Format?

When this setting is enabled, the access point generates EMBLEM (Baseline Manageability

Specification) standard compliant system log messages:

ipaddress Counter: [yyyy mmm dd hh:mm:ss TimeZone +/– hh:mm]: %FACILTY- SEVERITY-MNEMONIC: Message-text

Example without timestamp:

192.168.12.83: %APBR-6-STA_ASSOC_OK: [AP350-12] Station [TEST-LPT]000750abcd2a Associated

Example with timestamp:

192.168.85:2002 SEP 12 13:52:12 PST -08:00: %APBR-6-STA_ASSOC_OK: [AP350-12] Station [TEST-LPT]000750abcd2a Associated

The timestamp is optional and included in the message only when the wall clock time is set on the access point. The facility code for all messages is APBR.

Syslog Destination Address

Type the IP address or the host name of the server running Syslog.

The Network Default Syslog Destination line under the syslog destination address field lists the syslog destination address provided by the DHCP or BOOTP server. This default syslog destination is only used if the syslog destination address field is blank.

Syslog Facility Number

Type the Syslog Facility number for the notifications. The default setting is 16, which corresponds to the Local0 facility code.

IEEE SNMP Traps Should Generate the Following Notifications

You can designate how the SNMP traps handles the following client events:

•Client Authentication Failure

•Client Deuthentication

•Client Disassociation

You can set the following options for each event:

•No Trap nor Event Log—the event is neither trapped nor logged

•Event Log Only—the event is generated and sent to the event log only

•IEEE Trap Only—the event is trapped and sent to an SNMP community

•Both IEEE Trap and Event Log—the event is trapped and sent to the event log

Cisco Aironet 1200 Series Access Point Software Configuration Guide

7-26 OL-2159-05