5-27
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 5 Configuring Interfaces
Configuring Inline VLAN Pair Mode
–
half—Sets the interface to half duplex.
Note The duplex option is protected on all modules.
• no—Removes an entry or selection setting.
• speed—Specifies the speed setting of the interface:
–
auto—Sets the interface to auto negotiate speed.
–
10—Sets the interface to 10 MB (for TX interfaces only).
–
100—Sets the interface to 100 MB (for TX interfaces only).
–
1000—Sets the interface to 1 GB (for Gigabit interfaces only).
Note The speed option is protected on all modules.
• subinterface-type—Specifies that the interface is a subinterface and what type of subinterface is
defined.
–
inline-vlan-pair—Lets you define the subinterface as an inline VLAN pair.
–
none—No subinterfaces defined.
• subinterface name—Defines the subinterface as an inline VLAN pair:
–
vlan1—Specifies the first VLAN in the inline VLAN pair.
–
vlan2—Specifies the second VLAN in the inline VLAN pair.
Configuring Inline VLAN Pairs
To configure the inline VLAN pair settings on the sensor, follow these steps:
Step 1 Log in to the CLI using an account with administrator privileges.
Step 2 Enter interface submode.
sensor# configure terminal
sensor(config)# service interface
sensor(config-int)#
Step 3 Verify if any inline interfaces exist (the subinterface type should read “none” if no inline interfaces have
been configured).
sensor(config-int)# show settings
physical-interfaces (min: 0, max: 999999999, current: 5)
-----------------------------------------------
<protected entry>
name: GigabitEthernet0/0 <defaulted>
-----------------------------------------------
media-type: tx <protected>
description: <defaulted>
admin-state: disabled <defaulted>
duplex: auto <defaulted>
speed: auto <defaulted>
alt-tcp-reset-interface
-----------------------------------------------
none
-----------------------------------------------
-----------------------------------------------