Cisco CCNA (200-301)IP ServicesMedium
A network administrator is reviewing the syslog messages on a Cisco router and observes the following output: `%SYS-5-CONFIG_I: Configured from console by console` `%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up` `%LINK-3-UPDOWN: Interface GigabitEthernet0/0, changed state to down` Which of the following statements is true regarding these syslog messages?
- AThe message `%LINEPROTO-5-UPDOWN` indicates a severity level of 'alert'.
- BThe message `%SYS-5-CONFIG_I` indicates a severity level of 'informational'.
- CThe message `%SYS-5-CONFIG_I` indicates a severity level of 'warning'.
- DThe message `%LINK-3-UPDOWN` indicates a severity level of 'error'.
Show answer & explanationAnswer & explanation
Correct answer: D. The message `%LINK-3-UPDOWN` indicates a severity level of 'error'.
Cisco syslog messages use a numerical severity level. Level 3 corresponds to 'Error'. Level 5 corresponds to 'Notification'. Therefore, `%LINK-3-UPDOWN` indicates an error, and `%SYS-5-CONFIG_I` indicates a notification, not a warning or informational.
Why the other options are wrong
- A. Severity level 5 is 'Notification', not 'Alert' (which is level 1).
- B. Severity level 5 is 'Notification', not 'Informational' (which is level 6). While 'notification' and 'informational' are similar in meaning, Cisco's specific term for level 5 is 'notification'.
- C. Severity level 5 is 'Notification', not 'Warning' (which is level 4).
Cisco Syslog Severity Levels
A standardized scale (0-7) used in Cisco IOS syslog messages to indicate the criticality or severity of an event.
- 0 is Emergency (most severe), 7 is Debugging (least severe).
- Number appears after the facility code in the message.
- Helps filter and prioritize log messages.
Memory trick: The 'number' in syslog is like a 'pain scale' – lower means more urgent!