Filter
Top Products
5-36
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 5 Configuring Interfaces
Configuring VLAN Group Mode
Step 4 If there are inline interfaces that are using this physical interface, remove them.
sensor(config-int)# no inline-interfaces interface_name
Step 5 Display the list of available interfaces.
sensor(config-int)# physical-interfaces ?
GigabitEthernet0/0 GigabitEthernet0/0 physical interface.
GigabitEthernet0/1 GigabitEthernet0/1 physical interface.
GigabitEthernet0/2 GigabitEthernet0/2 physical interface.
GigabitEthernet0/3 GigabitEthernet0/3 physical interface.
Management0/0 Management0/0 physical interface.
sensor(config-int)# physical-interfaces
Step 6 Specify an interface.
sensor(config-int)# physical-interfaces GigabitEthernet0/2
Step 7 Enable the interface. You must also assign the interface to a virtual sensor and enable it before it can
monitor traffic.
sensor(config-int-phy)# admin-state enabled
Step 8 Add a description of this interface.
sensor(config-int-phy)# description INT1
Step 9 Specify the duplex settings. This option is not available on the ASA IPS modules (ASA 5500 AIP SSM,
ASA 5500-X IPS SSP, ASA 5585-X IPS SSP).
sensor(config-int-phy)# duplex full
Step 10 Specify the speed. This option is not available on the ASA IPS modules (ASA 5500 AIP SSM,
ASA 5500-X IPS SSP, ASA 5585-X IPS SSP).
sensor(config-int-phy)# speed 1000
Step 11 Set up the VLAN group.
sensor(config-int-phy)# subinterface-type vlan-group
sensor(config-int-phy-vla)# subinterface 1
Step 12 Assign the VLANs to this group:
a. Assign specific VLANs.
sensor(config-int-phy-vla-sub)# vlans range 1,5-8,10-15
sensor(config-int-phy-vla-sub)#
b. Verify the settings.
sensor(config-int-phy-vla-sub)# show settings
subinterface-number: 1
-----------------------------------------------
description: <defaulted>
vlans
-----------------------------------------------
range: 1,5-8,10-15
-----------------------------------------------
-----------------------------------------------
sensor(config-int-phy-vla-sub)#
c. Configure unassigned VLANs.
sensor(config-int-phy-vla-sub)# vlans unassigned
sensor(config-int-phy-vla-sub)#