CloudLabBox
Try the free demo

CCNA lab 28 of 46

Syslog and SNMP: see what your network is saying

Send two routers' logs to a network management station, read each message's facility, severity and mnemonic, then poll the routers with SNMPv2c and SNMPv3 and catch their link traps.

Run this lab

It needs Lite: its 4 nodes are set to 4 vCPU and 4,096 MB in total. That fits the free demo too.

In your workspace: Shared, then CCNA 200-301 guided labs, then 28 - Syslog and SNMP - see what your network is saying

Try it free for 30 minutesRun it on Lite from £3 a day

The free demo needs no card and no email. Every lab plan includes every guided lab.

Level
Intermediate
Time
About 55 minutes
Nodes need
4 vCPU, 4,096 MB
Smallest plan
Lite

The scenario

Harbourside Leisure's two routers fail occasionally, and the first anyone hears of it is a phone call. You'll set up a network management station (NMS, an Ubuntu workstation already running a syslog and trap receiver) so the routers send their log messages and traps to it, and so it can poll them with SNMP.

DeviceAddressNotes
R110.28.0.1/24managed router
R210.28.0.2/24managed router
S110.28.0.3/24switch
NMS10.28.0.100/24syslog (UDP 514) and trap (UDP 162) receiver; net-snmp tools

Lab values: SNMPv2c read-only community CLB-RO (polling) and CLB-TRAP (traps); SNMPv3 user nms in group NMS-GROUP, SHA password AuthPass1!, AES-128 password PrivPass1!.

What you’ll practise

  • Interpret syslog messages: timestamp, facility, severity, mnemonic and text
  • Configure buffered and remote logging with a severity threshold, facility and source interface
  • Explain SNMP managers, agents, MIBs, OIDs and the message types
  • Configure read-only SNMPv2c with an ACL and SNMPv3 with authentication and encryption
  • Send SNMP traps and see them arrive at the NMS

The tasks

  1. Take a syslog message apart
  2. Keep logs on the router
  3. Send logs to the NMS
  4. Understand SNMP
  5. Enable SNMPv2c read-only polling
  6. Add SNMPv3 with authentication and encryption
  7. Send traps

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Syslog and SNMP - see what your network is saying4 nodes, 3 links. Every link is listed as text below the diagram.R1R2S1NMSeth0Gi0/2Gi0/0Gi0/0Gi0/0Gi0/1
4 nodes, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Every link, as text
  • R1 Gi0/0 to S1 Gi0/0
  • R2 Gi0/0 to S1 Gi0/1
  • NMS eth0 to S1 Gi0/2
Nodes in Syslog and SNMP: see what your network is saying, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
R1Cisco IOSvvios-adventerprisek9-m.SPA.159-3.M61 vCPU, 1,024 MB
R2Cisco IOSvvios-adventerprisek9-m.SPA.159-3.M61 vCPU, 1,024 MB
S1Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 1,024 MB
NMSEVE-NG GUI server (Docker)eve-gui-server:latest1 vCPU, 1,024 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder CCNA 200-301 guided labs.

  3. Open 28 - Syslog and SNMP - see what your network is saying and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More CCNA labs

All CCNA labs

Related labs in other courses

CloudLabBox is independent of Cisco. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.