cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
miscavj
Level 8
Report Inappropriate Content
Message 1 of 3

SIEM 9.6.1 Collector Agent to Receiver via Layer 2

Jump to solution

Hi,

I wondered if anyone could offer any assistance with an issue we are currently having. We placed an IP address from the same subnet on interface 2 of one of our SIEM receivers. It is configured to receive logs from a data source on the same subnet. The subnet is behind a firewall. We did not configure the receiver interface with a default gateway IP, because traffic does not need to be routed. The arp-cache in the receiver is populating with the mac from the data source, but traffic cannot get back to the datasource. the collector agent shows "receiver not connected" As you can imagine, all settings have been checked and rechecked. Can logs be sent via switchport, or layer 2?

1 Solution

Accepted Solutions
miscavj
Level 8
Report Inappropriate Content
Message 2 of 3

Re: SIEM 9.6.1 Collector Agent to Receiver via Layer 2

Jump to solution

Had to remove the Default Gateway IP and DNS server IPs from the interface, and remove the network static route.

View solution in original post

2 Replies
miscavj
Level 8
Report Inappropriate Content
Message 2 of 3

Re: SIEM 9.6.1 Collector Agent to Receiver via Layer 2

Jump to solution

Had to remove the Default Gateway IP and DNS server IPs from the interface, and remove the network static route.

View solution in original post

catdaddy
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 3 of 3

Re: SIEM 9.6.1 Collector Agent to Receiver via Layer 2

Jump to solution

Discussion successfully moved from Business to Security Information and Event Management (SIEM)

Cliff
McAfee Volunteer
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community