Cisco Systems IPS 7.1 Home Security System User Manual


  Open as PDF
of 1042
 
4-10
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 4 Setting Up the Sensor
Changing Network Settings
Step 5 To remove the login banner text, use the no form of the command.
sensor(config-hos-net)# no login-banner-text
Step 6 Verify the login text has been removed.
sensor(config-hos-net)# show settings
network-settings
-----------------------------------------------
host-ip: 192.0.2.1/24,192.0.2.2
default: 192.168.1.2/24,192.168.1.1
host-name: sensor default: sensor
telnet-option: enabled default: disabled
access-list (min: 0, max: 512, current: 1)
-----------------------------------------------
network-address: 0.0.0.0/0
-----------------------------------------------
-----------------------------------------------
ftp-timeout: 300 seconds <defaulted>
login-banner-text: default:
-----------------------------------------------
sensor(config-hos-net)#
Step 7 Exit network settings mode.
sensor(config-hos-net)# exit
sensor(config-hos)# exit
Apply Changes:?[yes]:
Step 8 Press Enter to apply the changes or enter no to discard them.
Configuring the DNS and Proxy Servers for Global Correlation
Use the http-proxy, dns-primary-server, dns-secondary-server, and dns-tertiary-server commands
in network-settings submode to configure servers to support the global correlation features.
You must configure either an HTTP proxy server or DNS server to support global correlation. You may
need a proxy server to download global correlation updates if you use proxy in your network. If you are
using a DNS server, you must configure at least one DNS server and it must be reachable for global
correlation updates to be successful. You can configure other DNS servers as backup servers. DNS
queries are sent to the first server in the list. If it is unreachable, DNS queries are sent to the next
configured DNS server.
Caution For global correlation to function, you must have either a DNS server or an HTTP proxy server
configured at all times.
Caution DNS resolution is supported only for accessing the global correlation update server.
The following options apply:
http-proxy {no-proxy | proxy-sensor}—Configures the HTTP proxy server:
address ip_address —Specifies the IP address of the HTTP proxy server.
port port_number —Specifies the port number of the HTTP proxy server.