1. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir CCNP-SWITCHING 300-115 Mohamed Samir YouTube channel Double CCIEs #27042(R/S&SP)

2. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir Part V: Monitoring Campus Networks

3. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir Logging Switch Activity

4. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir Syslog Messages Each message contains the following fields: Timestamp: Facility Code:categorizes the switch function or module that has Generated generated the message; the facility code always begins with a percent sign Severity: A number from 0 to 7 that indicates Mnemonic: categorizes the event within the facility code. Message Text

5. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir Syslog will send to console or syslog message

6. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir Logging to the Switch Console Switch(config)# logging console severity switch(config)#logging console 3 Configures console logging at level 3 (error). Logging messages with a severity level of 3 or above are displayed on the console. switch(config)# no logging console (default is 2) Telnet or Secure Shell (SSH) “terminal Monitor”

7. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir Logging to the Internal Buffer By default, the internal logging buffer is disabled Switch(config)# logging buffered severity If you depend on logging buffer you need to increase it Switch(config)# logging buffered size (4096 to 2147483647) bytes Too big is effect your memory show logging

8. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir Logging to a Remote Syslog Server syslog server over the network using UDP port 514 Switch(config)# logging host ip-address “ you can have multiple logging server “ Switch(config)# logging trap severity

9. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir Adding Time Stamps to Syslog Messages 20w2d: %LINK-3-UPDOWN: Interface FastEthernet1/0/27, changed state to down 21w3d: %SYS-5-CONFIG_I: Configured from console by vty0 (172.25.15.246) Setting the Internal System Clock Switch# show clock *00:54:09.691 UTC Mon Mar 1 1993 Switch(config)# clock timezone EST -5 Switch(config)# clock summer-time EDT recurring Switch(config)# exit Switch# clock set 15:23:00

10. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir Using NTP to Synchronize with an External Time Source Network Time Protocol (NTP). With NTP, time sources or servers are arranged in a hierarchical fashion Each layer of the hierarchy is known as a stratum,

11. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir Switch(config)# ntp server 192.168.2.168 prefer Switch(config)# ntp server 24.56.178.140

12. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir Switch# show ntp status Clock is synchronized, stratum 1, reference is 192.168.2.168 nominal freq is 250.0000 Hz, actual freq is 249.9978 Hz, precision is 2**18 reference time is D74EEAB6.8408DB3D (13:15:34.515 EDT Wed Aug 20 2014) clock offset is -0.0089 msec, root delay is 0.82 msec root dispersion is 10.45 msec, peer dispersion is 0.03 msec Switch# show ntp associations address ref clock st when poll reach delay offset disp *~192.168.2.168.GPS. 1 335 512 377 3.0 -1.00 0.9 +~24.56.178.140.ACTS. 1 268 512 377 68.3 -9.90 1.2 * master (synced), # master (unsynced), + selected, - candidate, ~ configured

13. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir Securing NTP Switch(config)# ntp authentication-key key-number md5 key- string Switch(config)# ntp authenticate Switch(config)# ntp trusted-key key-number Switch(config)# ntp server ip-address key key-number Switch(config)# access-list acl-num permit ip-address mask Switch(config)# ntp access-group {serve-only | serve | peer | query-only} acl-num

14. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir Using SNTP to Synchronize Time the Simplified Network Time Protocol (SNTP) Switch(config)# sntp authentication-key key-number md5 key-string Switch(config)# sntp authenticate Switch(config)# sntp trusted-key key-number Switch(config)# sntp server ip-address key key-number

15. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir Any questions ?

16. © 2015 Mohamed Samir YouTube channel All rights reserved. www.mohamedsamir.comMohamed Samir Thank you for your time ! شكرا جزاكم الله خير