6-13
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 6 Configuring Virtual Sensors
Configuring Global Variables
To create a global variable, follow these steps:
Step 1 Log in to the CLI using an account with administrator privileges.
Step 2 Enter service analysis mode.
sensor# configure terminal
sensor(config)# service analysis-engine
sensor(config-ana)#
Step 3 Create the variable for the maximum number of open IP logs.
sensor(config-ana)# global-parameters
sensor(config-ana-glo)# ip-logging
sensor(config-ana-glo-ip)# max-open-iplog-files 50
sensor(config-ana-glo-ip)# exit
sensor(config-ana-glo)#
Step 4 Create the flow depth variable.
sensor(config-ana-glo)# specify-flow-depth 500
sensor(config-ana-glo)# exit
sensor(config-ana)#
Step 5 Verify the global variable settings.
sensor(config-ana-glo)# show settings
global-parameters
-----------------------------------------------
specify-flow-depth: 500 default: 0
-----------------------------------------------
ip-logging
-----------------------------------------------
max-open-iplog-files: 50 default: 20
-----------------------------------------------
-----------------------------------------------
sensor(config-ana-glo)#
Step 6 Exit analysis engine mode.
sensor(config-ana)# exit
sensor(config)#
Apply Changes:?[yes]:
Step 7 Press Enter to apply the changes or enter no to discard them.