# Syslog Encryption Configuration Example

This section describes the overall configuration procedure of syslog encryption.

#### Prerequisites

- If you select TCP, to complete the syslog receiving configuration in the ATIC, you must ensure that you have completed the certificate configuration on the anti-DDoS device.

  1. Obtain the root certificate rootcert.pem and CA certificate cacert.pem.

     - In the Windows operating system, Obtain the root certificate rootcert.pem and CA certificate cacert.pem from software-installation-path\Runtime\LegoRuntime\cert.
     - In the Linux operating system, Obtain the root certificate rootcert.pem and CA certificate cacert.pem from software-installation-path/components/atic/LegoRuntime/cert.

  2. Upload root certificate rootcert.pem and CA certificate cacert.pem of the management center to the cfcard:/security/ folder of the device through FTP. If this folder does not exist, create one.

  3. Enter ssl policy ssldl and access the ssl policy view. ssldl indicates the view name.

  4. Enter trusted-ca load pem-ca rootcert.pem and import the root certificate.

     Enter trusted-ca load pem-ca cacert.pem and import the CA certificate.

- If you select TCP, to complete the syslog receiving configuration, you shall run the info-center loghost ip-address transport tcp ssl-policy policy-name command on the device.

- If you select UDP, to complete the syslog receiving configuration, you shall run the info-center loghost ip-address command on the device.

- If you select both TCP and UDP, to complete the syslog receiving configuration, you shall run the info-center loghost ip-address transport tcp ssl-policy policy-name or info-center loghost ip-address command on the device as required.

#### Procedure

- Configure syslog receiving.
  1. Choose System > Log Management > Syslog Receive Configuration.
  2. Click and set syslog receiving parameters.

     - UDP is insecure. You are advised to use the more secure TCP (TLSv1.2).

     - Usually, the default port is used. To change the port, ensure that the newly configured port is not in conflict with existing ones.

Parent topic: Log Management

Copyright © Huawei Technologies Co., Ltd.