Dell EMC Networking OS Configuration Guide for the S5048F–ON System 9.14.2.8

Setting Up a Secure Connection to a Syslog Server

You can use reverse tunneling with the port forwarding to securely connect to a syslog server.

Pre-requisites

To configure a secure connection from the switch to the syslog server:

1. On the switch, enable the SSH server

   DellEMC(conf)#ip ssh server enable

2. On the syslog server, create a reverse SSH tunnel from the syslog server to the Dell OS switch, using following syntax:

   ssh -R <remote port>:<syslog server>:<syslog server listen port> user@remote_host -nNf

   In the following example the syslog server IP address is 10.156.166.48 and the listening port is 5141. The switch IP address is 10.16.131.141 and the listening port is 5140

   ssh -R 5140:10.156.166.48:5141 admin@10.16.131.141 -nNf 

3. Configure logging to a local host. locahost is  “127.0.0.1” or “::1”.

   If you do not, the system displays an error when you attempt to enable role-based only AAA authorization.

   DellEMC(conf)# logging localhost tcp port
   DellEMC(conf)#logging 127.0.0.1 tcp 5140