This article will explain about the feature "System log (syslog control plane) over TLS with IPv4/IPv6" and supported Juniper devices.
We may encounter below error while configuring Syslog over TLS with IPv4/IPv6 on Juniper QFX5K devices.
CA : CA certificate lab-ca verification failed. CRL file missing in local store local : local certificate swl002-cert verification failed. local cert is revoked
Below troubleshooting steps doesn't resolve the issue.
- generate keypair
- generate csr
- sign csr on external CA
- load CA certificate and CSR certificate
- load CRL
We can use Transport Layer Security (TLS) to provide a secure connection for the transport of syslog messages however this feature is platform dependent and not supported on QFX models.
Please refer below link for more details.
System log (syslog control plane) over TLS with IPv4/IPv6 | Juniper Networks Pathfinder Feature Explorer
Follow the steps mentioned in below article for the above mentioned feature supported platforms.
Configure Syslog over TLS | Junos OS | Juniper Networks
System log (syslog control plane) over TLS with IPv4/IPv6 | Juniper Networks Pathfinder Feature ExplorerConfigure Syslog over TLS | Junos OS | Juniper Networks