HP Comware

The Comware platform supports different hardware structures, operating systems (OS) and chips. It is highly scalable and portable, highly reliable and maintainable, and it features powerful system management functions.

The Comware platform supports many kinds of device structures such as centralized case-shape devices, centralized plug-in devices, distributed devices, and Intelligent Resilient Fabric (IRF) devices.

The Comware platform provides a series of configuration commands and command line interfaces, which facilitates the user’s configuration and management of devices. The users can log in to the Comware platform through the console port, AUX port, Telnet, SSH (Secure Shell) and then manage the devices through CLI.

Comware can be found on HP, H3C and 3COM devices.

For log collecting from Comware device please follow next few steps. We only setup the device to sending logs to Logmanager.

1. Login to Comware device via SSH, Telnet or console

2. Enter to the configuration mode:

   system-view
   

3. Configure device for collecting logs:

   # collecting logs of dot1x login
   port-security trap dot1xlogon
   
   # collecting logs of dot1x logout
   port-security trap dot1xlogoff
   
   # collecting logs of dot1x wrong login
   port-security trap dot1xlogfailure
   
   # collecting logs of MAC login
   port-security trap ralmlogon
   
   # collecting logs of MAC logout
   port-security trap ralmlogoff
   
   # collecting logs of MAC wrong login
   port-security trap ralmlogfailure
   
   # specify the name of information channel, disable trap to syslog
   info-center source default channel 0 trap state off
   

4. Set IP address of Logmanager:

   info-center loghost <Logmanager_IP_address> channel 0
   

   Change <Logmanager_IP_address> to IP address of your Logmanager instance.

Now your Comware device will be sending logs to the Logmanager.

port-security access-user log enable failed-authorization mac-learning violation

mac-authentication access-user log enable failed-login logoff successful-login

dot1x access-user log enable abnormal-logoff failed-login normal-logoff successful-login