I'd like to set up remote logging for all my production routers. I did implement it a while ago. Set everything up and was happy for 10 minutes before I realised it was all basically unencrypted traffic flying over the internet and swiftly disabled it on all routers.

I'm thinking I can use a MT to MT vpn, using my office one as the server and pointing all traffic to my internal log server here. In my head it seems as simple as getting the VPN connection active then using "ip.of.log.server" as the remote log address. Is it that simple or are there more hoops I need to jump through? I can't test myself yet as I'm now rolling out a new server to host other things which won't be ready for a while.

T.i.a

Will have to configure routing, make sure FW's do not block this traffic between sites and ensure your syslog server accepts from these IP's, that should be all