Alcatel-Lucent OmniAccess 700, Cli Configuration Manual

Page: 848 / 1193

Intrusion Detection System
Left running head:
Chapter name (automatic)
822
Beta Beta
CLI Configuration Guide
Alcatel-Lucent
IDS C
ONFIGURATION
C
OMMANDS
The following commands are used to configure IDS on the OA-700.
T
O
C
ONFIGURE AN
IDS S
ENSOR
Note: The OA-700 supports Snort based sensors.
E
XAMPLE
ALU(config)#firewall
ALU(config-firewall)# intrusion sensor sensor1 snort threshold
10 1000
ALU(config-firewall-intrusion-sensor-sensor1)#
ALU(config-firewall)# intrusion sensor sensor1 snort no
threshold
ALU(config-firewall)# no intrusion sensor sensor1 snort
Command (in FwCM) Description
intrusion sensor <name> snort
[ no threshold | threshold < 1-
4294967295 > < 1-4294967295 >]}
Use this command to create an
intrusion sensor based on snort. Enter
this command in the Firewall
configuration mode.
Use the ‘ threshold ’ keyword to
configure the threshold for the sensor.
Use the ‘ no threshold ’ keyword to
remove threshold configured for the
sensor.
no intrusion sensor <name>
snort
Use this command to delete an
intrusion sensor.
Note: You cannot delete the
intrusion sensor if it is
attached to a firewall policy.
Detach the sensor from the
firewall policy before
deleting it.