Filter
Top Products
14-17
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 14 Configuring Attack Response Controller for Blocking and Rate Limiting
Disabling Blocking
Step 3 Enter general submode.
sensor(config-net)# general
Step 4 Disable blocking event and error logging.
sensor(config-net-gen)# log-all-block-events-and-errors false
Step 5 Verify that logging is disabled.
sensor(config-net-gen)# show settings
general
-----------------------------------------------
log-all-block-events-and-errors: false default: true
enable-nvram-write: false default: false
enable-acl-logging: false default: false
allow-sensor-block: false <defaulted>
block-enable: true <defaulted>
block-max-entries: 250 <defaulted>
max-interfaces: 250 <defaulted>
master-blocking-sensors (min: 0, max: 100, current: 0)
-----------------------------------------------
Step 6 Enable blocking event and error logging.
sensor(config-net-gen)# log-all-block-events-and-errors true
Step 7 Verify that logging is enabled.
sensor(config-net-gen)# show settings
general
-----------------------------------------------
log-all-block-events-and-errors: true default: true
enable-nvram-write: false default: false
enable-acl-logging: false default: false
allow-sensor-block: false <defaulted>
block-enable: true <defaulted>
block-max-entries: 250 <defaulted>
max-interfaces: 250 <defaulted>
master-blocking-sensors (min: 0, max: 100, current: 0)
-----------------------------------------------
Step 8 Exit network access mode.
sensor(config-net-gen)# exit
sensor(config-net)# exit
Apply Changes:?[yes]:
Step 9 Press Enter to apply the changes or type no to discard them.
Configuring the Maximum Number of Blocking Interfaces
Use the max-interfaces command to configure the maximum number of interfaces for performing
blocks. For example, a PIX Firewall counts as one interface. A router with one interface counts as one,
but a router with two interfaces counts as two. At most you can configure 250 blocking interfaces on a
router, switch, or firewall. You can configure up to 250 Catalyst 6K switches, 250 routers, and 250
firewalls.