Cisco Systems IPS 7.1 Home Security System User Manual


  Open as PDF
of 1042
 
C-28
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Appendix C Troubleshooting
Troubleshooting the Appliance
access-list 0.0.0.0/0
ftp-timeout 300
no login-banner-text
exit
--MORE--
Step 4 Make sure the management port is connected to an active network connection. If the management port
is not connected to an active network connection, the management interface does not come up.
Step 5 Make sure the IP address of the workstation that is trying to connect to the sensor is permitted in the
sensor access list. If the workstation network address is permitted in the sensor access list, go to Step 6.
sensor# setup
--- System Configuration Dialog ---
At any point you may enter a question mark '?' for help.
User ctrl-c to abort configuration dialog at any prompt.
Default settings are in square brackets '[]'.
Current Configuration:
service host
network-settings
host-ip 192.168.1.2/24,192.168.1.1
host-name sensor
telnet-option enabled
access-list 0.0.0.0/0
ftp-timeout 300
no login-banner-text
exit
--MORE--
Step 6 Add a permit entry for the workstation network address, save the configuration, and try to connect again.
Step 7 Make sure the network configuration allows the workstation to connect to the sensor. If the sensor is
protected behind a firewall and the workstation is in front of the firewall, make sure the firewall is
configured to allow the workstation to access the sensor. Or if the workstation is behind a firewall that
is performing network address translation on the workstation IP address, and the sensor is in front of the
firewall, make sure that the sensor access list contains a permit entry for the workstation translated
address.
For More Information
For the procedure for enabling and disabling Telnet on the sensor, see Enabling and Disabling
Telnet, page 4-5.
For the various ways to open a CLI session directly on the sensor, see Chapter 2, “Logging In to the
Sensor.”
For the procedure for changing the IP address, see Changing the IP Address, Netmask, and Gateway,
page 4-4.
For the procedure for changing the access list, see Correcting a Misconfigured Access List,
page C-29.