DHCP Syslog Service Installation and Configuration

DHCP Syslog Services Prerequisites

The following prerequisites will need to be completed on all Windows DHCP servers used by machines being managed by SafeConnect.

Step-by-step guide

Confirm Log File Size

Ensure the value allows for sufficient log file growth. SafeConnect needs to relay all DHCP transactions to SafeConnect. If the log file growth is capped, the DHCP server will stop logging and SafeConnect will not receive the transactions.

  • Open the registry to confirm this by locating the one of the following keys:

Windows 2008 and Windows 2012:

HKLM\SYSTEM\CurrentControlSet\Services\DhcpServer\Parameters\DhcpLogFilesMaxSize

Some Windows 2008:

HKLM\SYSTEM\CurrentControlSet\Services\DhcpServer\Parameters\DhcpLogMinSpaceOnDisk

Note: Windows Servers will only have one of these registry keys. Do not create an additional registry key if one is already present.

  • Impulse Point recommends setting this to a value equal to 2048MB (if represented as a hex value it would be "800")

    • This will allow for 7 (seven) 290 MB log files.

    • Note: Every environment is different. SafeConnect recommends 700 MB as a starting point. A larger environment may generate a higher volume of DHCP Transaction Logs, if the log files stop being updated during the week, this value will need to be increased.

If this registry value is changed, the DHCP service will need to be restarted for the change to take effect.

Installing the Impulse Windows Services

The DHCP Syslog Service should be installed on all Windows DHCP servers used by any machine that will be managed by SafeConnect. The installer install and starts a service on each DHCP server. No reboot of the server is required. If a mistake is made with one of the parameters, or if something changes at a later date, re-running the installer is completely safe.

Download the Installer to each domain controller

The Windows services installer can be downloaded from:

https://portal.myweblogon.com:8443/downloads/Tools/ImpulseServicesSetup.exe

If downloading from a network segment that is not managed by SafeConnect, the internal IP address if the appliance (Manager node in a cluster) should be used in place of portal.myweblogon.com.

Launching the Installer

Once the Installer is downloaded, double-click to run. Choose “Next” on the first screen.

images/download/attachments/6076293/image2018-5-14_14-50-47.png

Select the DHCPsyslog Service to install and click “Finish”. This will launch the next portion of the install.

images/download/attachments/6076293/image2018-5-14_14-51-32.png

If pre-requisites are not completed, the following warning messages will be displayed and the installer will abort. If the message is displayed, please review for pre-requisite section of this document.

images/download/attachments/6076293/image2018-5-14_14-51-52.png

Completing the DHCP Syslog Service Install

Click “Next” on the DHCP Syslog Service portion of the installer.

images/download/attachments/6076293/image2018-5-14_14-53-0.png

Under Enforcer IP, enter the internal IP address of the SafeConnect appliance. In a cluster, this will be the Manager node. Click “Next”.

images/download/attachments/6076293/image2018-5-14_14-53-13.png

Choose the install location for the service. In most cases, the defaults will be sufficient. Click “Next”.

images/download/attachments/6076293/image2018-5-14_14-53-22.png

Click “Next” when prompted to create a Start Menu shortcut.

images/download/attachments/6076293/image2018-5-14_14-53-44.png

Click “Install” when ready.

images/download/attachments/6076293/image2018-5-14_14-53-51.png

Click “Finish” to close the installer.

images/download/attachments/6076293/image2018-5-14_14-54-1.png