Cisco Systems IPS 7.1 Home Security System User Manual


  Open as PDF
of 1042
 
6-8
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 6 Configuring Virtual Sensors
Adding, Editing, and Deleting Virtual Sensors
sensor(config-ana-vir)# physical-interface
sensor(config-ana-vir)# logical-interface ?
<none available>
Step 13 Assign the promiscuous mode interfaces you want to add to this virtual sensor. Repeat this step for all
the promiscuous interfaces that you want to assign to this virtual sensor.
sensor(config-ana-vir)# physical-interface GigabitEthernet0/3
Step 14 Assign the inline interface pairs you want to add to this virtual sensor. You must have already paired the
interfaces.
sensor(config-ana-vir)# logical-interface inline_interface_pair_name
Step 15 Assign the subinterfaces of the inline VLAN pairs or groups you want to add to this virtual sensor. You
must have already subdivided any interfaces into VLAN pairs or groups.
sensor(config-ana-vir)# physical-interface GigabitEthernet2/0 subinterface-number
subinterface_number
Step 16 Verify the virtual sensor settings.
sensor(config-ana-vir)# show settings
name: vs1
-----------------------------------------------
description: virtual sensor 1 default:
signature-definition: sig1 default: sig0
event-action-rules: rules1 default: rules0
anomaly-detection
-----------------------------------------------
anomaly-detection-name: ad1 default: ad0
operational-mode: learn default: detect
-----------------------------------------------
physical-interface (min: 0, max: 999999999, current: 2)
-----------------------------------------------
name: GigabitEthernet0/3
subinterface-number: 0 <defaulted>
-----------------------------------------------
inline-TCP-session-tracking-mode: virtual-sensor default: virtual-sensor
-----------------------------------------------
logical-interface (min: 0, max: 999999999, current: 0)
-----------------------------------------------
-----------------------------------------------
-----------------------------------------------
sensor(config-ana-vir)#
Step 17 Exit analysis engine mode.
sensor(config-ana-vir)# exit
sensor(config-ana)# exit
sensor(config)#
Apply Changes:?[yes]:
Step 18 Press Enter to apply the changes or enter no to discard them.