Alcatel-Lucent OmniAccess 700, Cli Configuration Manual

Page: 861 / 1193

IDS Configuration Scenario Using OA-700
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
835
Alcatel-Lucent
Beta Beta
CLI Configuration Guide
IDS C
ONFIGURATION
S
CENARIO
U
SING
OA-700
The step-by-step procedure to configure IDS using the OA-700 is given below.
C
ONFIGURATION
S
TEPS
Q
UICK
S
TEPS
1. Create match-list.
2. Create intrusion sensor.
3. Create firewall policy.
4. Attach match-list and intrusion sensor to the firewall policy.
5. Attach firewall policy to an interface.
D
ETAILED
S
TEPS
Step 1: Configure rule using match-list for any packet that matches classification.
ALU(config)#match-list m1
ALU(config-match-list-m1)#ip any any
ALU(config-match-list-m1)#exit
Step 2: Create an intrusion sensor.
ALU(config)#firewall
ALU(config-firewall)#intrusion sensor ids1 snort
ALU(config-intrusion-sensor-ids1)#exit
Step 3: Create a firewall policy.
ALU(config)#firewall
ALU(config-firewall)#policy p1
ALU(config-firewall-p1)#
Step 4: Attach match-list and intrusion sensor to the firewall policy and specify the
action (detection or prevention).
ALU(config-firewall-p1)#match m1 intrusion ids1 prevention
Step 5: Apply the firewall policy to ingress of WAN interface.
ALU(config)#interface GigabitEthernet 7/1
ALU(config-if GigabitEthernet7/1)#firewall policy in p1
ALU(config-if GigabitEthernet7/1)#exit
S
HOW
C
OMMANDS
1. To check firewall policy with IDS sensor information
ALU#show firewall policy p1
ALU#show firewall intrusion sensor ids1
2. To verify firewall intrusion statistics and counters when device detects the
intrusion
ALU#show firewall intrusion snort statistics