Cisco Systems IPS 7.1 Home Security System User Manual


  Open as PDF
of 1042
 
5-41
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 5 Configuring Interfaces
Configuring CDP Mode
Step 6 Specify the missed percentage threshold.
sensor(config-int-int)# missed-percentage-threshold 1
Step 7 Specify the notification interval.
sensor(config-int-int)# notification-interval 60
Step 8 Verify the settings.
sensor(config-int-int)# show settings
interface-notifications
-----------------------------------------------
missed-percentage-threshold: 1 percent default: 0
notification-interval: 60 seconds default: 30
idle-interface-delay: 60 seconds default: 30
-----------------------------------------------
sensor(config-int-int)#
Step 9 Exit interface notifications submode.
sensor(config-int-int)# exit
sensor(config-int)# exit
Apply Changes:?[yes]:
Step 10 Press Enter to apply the changes or enter no to discard them.
Configuring CDP Mode
Note The ASA 5500-X IPS SSP and the ASA 5585-X IPS SSP do not support CDP mode.
You can configure the sensor to enable or disable the forwarding of CDP packets. This action applies
globally to all interfaces.
Cisco Discovery Protocol is a media- and protocol-independent device-discovery protocol that runs on
all Cisco-manufactured equipment, including routers, access servers, bridges, and switches. Using CDP,
a device can advertise its existence to other devices and receive information about other devices on the
same LAN or on the remote side of a WAN. CDP runs on all media that support SNAP, including LANs,
Frame Relay, and ATM media.
User the cdp-mode command in service interface mode to have the sensor either forward or drop CDP
packets.
The following option applies:
cdp-mode {forward-cdp-packets | drop-cdp-packets}—Configures the sensor to either forward
CDP packets or drop CDP packets. The default is drop-cdp-packets.
Enabling CDP Mode
To configure CDP mode, follow these steps:
Step 1 Log in to the CLI using an account with administrator privileges.
Step 2 Enter interface submode.
sensor# configure terminal