Alcatel-Lucent OmniAccess 700, Cli Configuration Manual

Page: 845 / 1193

IDS Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
819
Alcatel-Lucent
Beta Beta
CLI Configuration Guide
IDS C
ONFIGURATION
S
TEPS
This section lists the step-by-step instructions to be followed while configuring
IDS.
Step 1: Configure rule using match-list for any packet that matches classification.
(Refer to the chapter on “Common Classifiers” in this document.)
Step 2: Enter Firewall Configuration Mode.
ALU(config)# firewall
ALU(config-firewall)#
Step 3: Configure intrusion sensor. See “To Configure an IDS Sensor”
Step 4: Optional configuration commands.
•
Update Snort Rule. See “To Update Snort Rule”
•
Rollback Snort Rule Database. See “To Rollback Snort Rule Database”
•
Manually Rebuild Signature Database. See “To Manually Rebuild
Signature Database”
•
Modifying Snort Rule for detecting intrusion. See “To Modify Group Level
Detection”
•
Enable/Disable Snort Rule. See “To Enable/Disable Snort Rule”
•
Modify Snort Rule. See “To Modify Snort Rule”
•
Prevent Snort Rule Modification. See “To Modify Group Level Prevention”
Step 5: Configure Firewall Policy.
ALU(config)# policy <name>
ALU(config-firewall-policy< name >)#
Example:
ALU(config-firewall)# policy P1
ALU(config-firewall-policy-P1)#
(For a detailed information on firewall, refer “Filter and Firewall” chapter.)
Step 6: Attach the configured intrusion sensors to the firewall policy. See “To
Create a Intrusion Rule Inside a Firewall Policy”