Filter
Top Products
5-4
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 5 Configuring Interfaces
Understanding Interfaces
Table 5-1 lists the command and control interfaces for each sensor.
Sensing Interfaces
Sensing interfaces are used by the sensor to analyze traffic for security violations. A sensor has one or
more sensing interfaces depending on the sensor. Sensing interfaces can operate individually in
promiscuous mode or you can pair them to create inline interfaces.
Note On appliances, all sensing interfaces are disabled by default. You must enable them to use them. On
modules, the sensing interfaces are permanently enabled.
Some appliances support optional interface cards that add sensing interfaces to the sensor. You must
insert or remove these optional cards while the sensor is powered off. The sensor detects the addition or
removal of a supported interface card. If you remove an optional interface card, some of the interface
configuration is deleted, such as the speed, duplex, description string, enabled/disabled state of the
interface, and any inline interface pairings. These settings are restored to their default settings when the
card is reinstalled. However, the assignment of promiscuous and inline interfaces to the Analysis Engine
is not deleted from the Analysis Engine configuration, but is ignored until those cards are reinserted and
you create the inline interface pairs again.
Table 5-1 Command and Control Interfaces
Sensor Command and Control Interface
ASA 5500 AIP SSM-10 GigabitEthernet 0/0
ASA 5500 AIP SSM-20 GigabitEthernet 0/0
ASA 5500 AIP SSM-40 GigabitEthernet 0/0
ASA 5512-X IPS SSP Management 0/0
ASA 5515-X IPS SSP Management 0/0
ASA 5525-X IPS SSP Management 0/0
ASA 5545-X IPS SSP Management 0/0
ASA 5555-X IPS SSP Management 0/0
ASA 5585-X IPS SSP-10 Management 0/0
ASA 5585-X IPS SSP-20 Management 0/0
ASA 5585-X IPS SSP-40 Management 0/0
ASA 5585-X IPS SSP-60 Management 0/0
IPS 4240 Management 0/0
IPS 4255 Management 0/0
IPS 4260 Management 0/0
IPS 4270-20 Management 0/0
IPS 4345 Management 0/0
IPS 4360 Management 0/0
IPS 4510 Management 0/0
IPS 4520 Management 0/0