6-4
User Guide for Cisco Security MARS Local Controller
78-17020-01
Chapter 6 Configuring Network-based IDS and IPS Devices
Cisco IDS 3.1 Sensors
Figure 6-4
Add MARS Information to Cisco IDS 3.1 Destinations File
Step 4
Once you’ve edited these four files (organizations, hosts, routes, and destinations), reboot the sensor
using the following commands:
a.
nrstop
b.
nstart
Add and Configure a Cisco IDS 3.1 Device in MARS
To add and configure a Cisco IDS device in MARS, follow these steps:
Step 1
Click
Admin > System Setup > Security and Monitor Devices
>
Add
.
Step 2
Select
Cisco IDS 3.1
from the Device Type
list.
Step 3
Enter the hostname of the sensor in the Device Name field.
The Device Name value must be identical to the configured sensor name.
Step 4
Enter the administrative IP address in the Access IP field.
Step 5
Enter the administrative IP address in the Reporting IP field.
The Reporting IP address is the same address as the administrative IP address.
Step 6
Select either
SSH
or
TELNET
.
Step 7
Enter “
netrangr”
as the
Login
and its
Password
.
When adding a Cisco IDS 3.1 device, use the netrangr username or some other username that is not the
root login for the sensor. Using the root login causes MARS to fail to parse the login prompt correctly,
which in turn, cause the Test Connectivity to fail.
