Fortinet white logo
Fortinet white logo

Hyperscale Firewall Guide

Multicast-mode logging example

Multicast-mode logging example

You can use multicast-mode logging to simultaneously send hardware log messages to multiple remote syslog or NetFlow servers.

Enable multicast-mode logging by creating a log server group that contains two or more log servers and then set log-tx-mode to multicast:

config log npu-server

set log-processor {hardware | host}

config server-group

edit "log_ipv4_server1"

set log-format {netflow | syslog}

set log-tx-mode multicast

end

The following example shows how to set up two remote syslog servers and then add them to a log server group with multicast-mode logging enabled. This configuration is available for both NP7 (hardware) and CPU (host) logging.

config log npu-server

set log-processor {hardware | host}

config server-info

edit 1

set vdom "root"

set ipv4-server <server-ip>

set source-port 8055

set dest-port 2055

set template-tx-timeout 60

next

edit 2

set vdom "root"

set ipv4-server <server-ip>

set source-port 8055

set dest-port 2055

set template-tx-timeout 60

end

end

config server-group

edit "Example-Multicast"

set log-format syslog

set log-tx-mode multicast

set server-number 2

set server-start-id 1

end

Multicast-mode logging example

Multicast-mode logging example

You can use multicast-mode logging to simultaneously send hardware log messages to multiple remote syslog or NetFlow servers.

Enable multicast-mode logging by creating a log server group that contains two or more log servers and then set log-tx-mode to multicast:

config log npu-server

set log-processor {hardware | host}

config server-group

edit "log_ipv4_server1"

set log-format {netflow | syslog}

set log-tx-mode multicast

end

The following example shows how to set up two remote syslog servers and then add them to a log server group with multicast-mode logging enabled. This configuration is available for both NP7 (hardware) and CPU (host) logging.

config log npu-server

set log-processor {hardware | host}

config server-info

edit 1

set vdom "root"

set ipv4-server <server-ip>

set source-port 8055

set dest-port 2055

set template-tx-timeout 60

next

edit 2

set vdom "root"

set ipv4-server <server-ip>

set source-port 8055

set dest-port 2055

set template-tx-timeout 60

end

end

config server-group

edit "Example-Multicast"

set log-format syslog

set log-tx-mode multicast

set server-number 2

set server-start-id 1

end