Alcatel-Lucent OmniAccess 700, Cli Configuration Manual

Page: 850 / 1193

Intrusion Detection System
Left running head:
Chapter name (automatic)
824
Beta Beta
CLI Configuration Guide
Alcatel-Lucent
Note: It is preferable to upgrade the signatures from Alcatel-Lucent HTTPS server. For e.g.,
‘update instant https https://<username:password@<server-name/ip>/signature.tar.gz
passive/rebuild’. It will internally verify the signature versions and download the latest
signatures.
However if you want to use an in-house HTTP server, you need to copy the signature
files and corresponding digital signatures (provided by Alcatel-Lucent) into your
private server.
For e.g., use the below command to install the latest signatures from the local server
once it is downloaded from the ALU server ‘update install http http://<private-server>/
<path-to-the-directory>/signature-2-3-49.tar.gz passive’. This will update to signature-
2-3-49 without checking whether it is latest or not.
T
O
R
OLLBACK
S
NORT
R
ULE
D
ATABASE
E
XAMPLE
ALU(config-firewall-intrusion-snort)#rollback 2.3.1
T
O
M
ANUALLY
R
EBUILD
S
IGNATURE
D
ATABASE
E
XAMPLE
ALU(config-firewall-intrusion-snort)# rebuild 2.3.0
T
O
M
ODIFY
G
ROUP
L
EVEL
D
ETECTION
E
XAMPLE
ALU(config-farewell-intrusion-snort)# rule detection category
attack-responses
Command (in Intrusion Snort CM) Description
rollback < version-number >
Use this command to rollback to different
versions of the Snort rule database.
Command (in Intrusion Snort CM) Description
rebuild <version-number>
Use this command to manually rebuild
the signature database.
Command (in Intrusion Snort CM) Description
rule detection {{ category
<name>.. | classtype <name>.. |
priority { high | low | medium }}
This command enables you to modify the
group level detection.