Filter
Top Products
4-13
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 4 Setting Up the Sensor
Changing the CLI Session Timeout
network-settings
-----------------------------------------------
host-ip: 10.106.164.52/24,10.106.164.1 default: 192.168.1.2/24,192.168.1.1
host-name: p32-ips4240-52 default: sensor
telnet-option: enabled default: disabled
sshv1-fallback: enabled default: enabled
access-list (min: 0, max: 512, current: 1)
-----------------------------------------------
network-address: 0.0.0.0/0
-----------------------------------------------
-----------------------------------------------
ftp-timeout: 300 seconds <defaulted>
login-banner-text: mmmm default:
sensor(config-hos-net)#
Step 5 Exit network settings mode.
sensor(config-hos-net)# exit
sensor(config-hos)# exit
Apply Changes:?[yes]:
Step 6 Press Enter to apply the changes or enter no to discard them.
Changing the CLI Session Timeout
Use the cli-inactivity-timeout command in the service authentication submode to change the number of
seconds that the CLI waits before timing out. Setting the CLI session timeout increases the security of a
CLI session. The default is 0 seconds, which means that it is an unlimited value and thus will never time
out. The valid range is 0 to 100,000 minutes. This command is supported in IPS 7.1(3)E4 and later.
To change the CLI session timeout, follow these steps:
Step 1 Log in to the sensor using an account with administrator privileges.
Step 2 Enter authentication mode.
sensor# configure terminal
sensor(config)# service authentication
Step 3 Change the number of seconds of the CLI session timeout.
sensor(config-aut)# cli-inactivity-timeout 5000
Step 4 Verify the CLI session timeout change.
sensor(config-aut)# show settings
attemptLimit: 0 <defaulted>
password-strength
-----------------------------------------------
size: 8-64 <defaulted>
digits-min: 0 <defaulted>
uppercase-min: 0 <defaulted>
lowercase-min: 0 <defaulted>
other-min: 0 <defaulted>
number-old-passwords: 0 <defaulted>
-----------------------------------------------
permit-packet-logging: true <defaulted>
cli-inactivity-timeout: 5000 default: 0
sensor(config-aut)#