Syslog (IOS-XR)

Use XR1 for this lab. Any XRv or XRd will work.

Configure logging as follows:

• Logging to the console should be at the debugging level

• Logging for SSH sessions should be at the warning level

• Logs up to debug level should be sent to a syslog server at 1.1.1.1 in the MGMT VRF using source-interface Lo100

• Logging to the buffer should be at the warning level, and the buffer should hold 5000000 bytes of logs

• Log files should be archived to the harddisk using the following settings:

  • Log files should be created on a daily basis

  • A log file should be no more than 5 megabytes, and the total size of the archive should be no more than 1000 megabytes

  • The router should keep no more than 10 weeks of logs on the harddisk

Answer

logging console debugging
logging monitor warning
logging buffered 5000000
logging buffered warnings
logging 1.1.1.1 vrf MGMT severity debugging
logging source-interface Loopback100 vrf MGMT
!
logging archive
 device harddisk
 file-size 5
 frequency daily
 archive-size 1000
 archive-length 10

Explanation

The logging settings for console, monitor, buffer, and remote syslog server are all fairly self explanatory.

Logging archive is used to retain logs on a longer-term basis. Logging to the buffer is not retained upon a reboot. The file-size command sets the max filesize in megabytes. The archive-size command sets the max size of the entire archive in megabytes. The archive-length defines the maximum number of weeks that log files are retained.