Nortel Application Switch

Nortel Application Switches integrate routing and switching by forwarding traffic at layer 2 speed by using layer 4-7 information.

About this task

The Nortel Application Switch DSM for IBM® QRadar® accepts events by using syslog. QRadar records all relevant status and network condition events. Before you configure a Nortel Application Switch device in QRadar, you must configure your device to send syslog events to QRadar.

To configure the device to send syslog events to QRadar:

Procedure

  1. Log in to the Nortel Application Switch command-line interface (CLI).
  2. Type the following command:

    /cfg/sys/syslog/host

  3. At the prompt, type the IP address of your QRadar:

    Enter new syslog host: <IP address>

    Where <IP address> is the IP address of your QRadar.

  4. Apply the configuration:

    apply

  5. After the new configuration is applied, save your configuration:

    save

  6. Type y at the prompt to confirm that you want to save the configuration to flash.
    See the following example:

    Confirm saving to FLASH [y/n]: y

    New config successfully saved to FLASH

    Next you will need to configure QRadar to receive events from a Nortel Application Switch:

  7. Configure the log source in QRadar. From the Log Source Type list, select the Nortel Application Switch option.

    For more information about the Nortel Application Switch, see your vendor documentation.