Up
Previous Next

Sheriff CSMâ„¢

Motorola RFS 4000

When you configure Motorola RFS 4000 to send log data to Sheriff CSM, you can use the Motorola RFS 4000 plugin to translate raw log data into normalized events for analysis. The table below provides some basic information for the plugin:

Plugin Information

DeviceDetails
Vendor Motorola
Device Type Router/Switch
Connection Type Syslog
Data Source Name Motorola RFS4000
Data Source ID 1901

Integrating Motorola RFS 4000

Before you configure the Motorola RFS 4000 integration, you must have the IP Address of the Sheriff CSM Sensor (Deputy).

To configure Motorola RFS 4000 to send Syslog messages to Sheriff CSM
  1. Access the Motorola console terminal and enter the configuration mode by typing the following:

    > configure terminal
  2. Enter the following commands on the command line:

    > logging on
    > logging aggregation-time <1-60>
    > logging [syslog] [<0-7>|alerts| critical|emergencies|errors|informational| notifications|warnings]
    > logging host <Sheriff CSM IP address>

    where:

    • on: Enables the logging of system messages.
    • aggregation-time <1-60>: Sets the number of seconds for aggregating repeated messages. The value can be configured between 1 and 60 seconds.
    • syslog [<0-7>|alerts| critical|debugging| emergencies|errors| informational| notifications|warnings]: Sets the syslog server logging level.
    • host <Sheriff CSM IP address>: Configures a remote host to receive log messages.

Plugin Enablement

For plugin enablement information, see Enable Plugins.

Additional Resources and Troubleshooting

http://documentation.extremenetworks.com/ExtremeWireless/WING_CRG_72E-139342-01_REVA_EN.pdf

For troubleshooting, see the vendor documentation.
Topic revision: r8 - 23 Jun 2022, SheriffCyberSecurity
Copyright 2020 Sheriff Cyber Security, LLC. All rights reserved.