Configuring a Dedicated Logging Port in Maestro

The logging mechanism on each Security Group Member in Security Groups forwards the logs directly to a dedicated Log Server over the Quantum Maestro Orchestrator's management port assigned to this Security Group.

However, the Quantum Maestro Orchestrator's management ports can experience a high load when Security Group Members generate a large number of logs.

To reduce the load on the Quantum Maestro Orchestrator's management ports:

  1. Assign a dedicated Quantum Maestro Orchestrator port of type management to a Security Group for logging

  2. Configure the Security Group to send the logs to the dedicated Log Server

Topology:

[Management Server](some interface) <===> (management port 1 on Quantum Maestro Orchestrator)[Security Group]

[Management Server](some interface) <===> (interface 1) [Log Server] (interface 2) <===> (management port 2 on Quantum Maestro Orchestrator)[Security Group]

Procedure:

Step

Instructions

1

Install a dedicated Log Server:

  1. Install a dedicated Log Server with two physical interfaces.

    See the applicable Installation and Upgrade Guide > Chapter Installing a Dedicated Log Server or SmartEvent Server.

  2. Connect one physical interface on the dedicated Log Server to the Management Server.

  3. Connect another physical interface on the dedicated Log Server directly to an available management port on the Quantum Maestro Orchestrator.

    Important - Do not use the same port on the Quantum Maestro Orchestrator, which connects to the Management Server.

  4. In SmartConsole, create the required object that represents the dedicated Log Server.

    See the applicable Installation and Upgrade Guide > Chapter Installing a Dedicated Log Server or SmartEvent Server.

2

On the Quantum Maestro Orchestrator, assign the dedicated port of type management to a Security Group and apply the changes.

3

In the Gaia OS of the Security Group, configure in Gaia gClish the dedicated management port.

Syntax:

[Expert@SG-s01-01:0]# gclish

[Global] SG-s01-01> set interface ethX-MgmtY ipv4-address <IPv4 Address> mask-length <Mask Length>

Example:

[Global] SG-s01-01 > set interface eth1-Mgmt2 ipv4-address 2.2.2.10 mask-length 24

Note - You must assign an IPv4 address from the same subnet as assigned to the dedicated interface on the Log Server, which connects to the Quantum Maestro Orchestrator.

4

In SmartConsole, configure the Security Group object to send its logs to the dedicated Log Server.

See the applicable Logging and Monitoring Administration Guide > Chapter Getting Started > Section Deploying Logging Section - Subsection Configuring the Security Gateways for Logging.

Note - The SMO makes sure that return traffic from the Log Server reaches the correct Security Group Member in the Security Group.