ip userlog export host bind ssl-policy

Function

The ip userlog export host bind ssl-policy command configures an SSL policy for the host used to receive user login and log out log packets and user login result log packets.

The undo ip userlog export host bind ssl-policy command deletes the configured SSL policy for the host used to receive user login and log out log packets and user login result log packets.

By default, no host SSL policy is configured for receiving user login and logout log packets and user login result log packets.

This command is supported only on the NetEngine 8000 F1A.

Format

ip userlog export host ip-address port bind ssl-policy ssl-policy-name

undo ip userlog export host ip-address port bind ssl-policy ssl-policy-name

Parameters

Parameter Description Value
port

Sets a port number for a log server.

The value is an integer that ranges from 1 to 65535.

ssl-policy ssl-policy-name

Specifies the name of an SSL policy.

The value is a string of 1 to 23 case-insensitive characters, spaces not supported.

host ip-address

Sets an IP address for a log server.

The value is in dotted decimal notation.

Views

System view

Default Level

2: Configuration level

Task Name and Operations

Task Name Operations
bras-control write

Usage Guidelines

Usage Scenario

The device supports the recording of user login and logout logs as well as the user login result logs. The logs can be sent to the log server for maintenance engineers to check. If a secure SSL connection is needed between the device and log server, you can run this command to bind an SSL policy.

Prerequisites

An SSL policy has been created using the ssl policy policy-name command.

Precautions

The prerequisite of making encrypted transmission effective is that the configured log server's IP address and port number must be consistent with the ip userlog { access | call-status } command configuration and ip userlog { access | call-status } must be set to transport tcp.

Example

# Configure an SSL policy named test for the log server whose IP address is 10.1.1.2 and port number is 1200.
<HUAWEI> system-view
[~HUAWEI] ssl policy test
[*HUAWEI-ssl-policy-test] commit
[~HUAWEI-ssl-policy-test] quit
[~HUAWEI] ip userlog export host 10.1.1.2 1200 bind ssl-policy test
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >