White Paper
All contents are Copyright © 1992–2007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 6 of 12
Step 4.4 Configure Cisco IOS IPS to use the default basic signature set:
training(config)#ip ips signature-category
training(config-ips-category)# category all
training (config-ips-category-action)# retired true
training (config-ips-category-action)# exit
training(config-ips-category)# category ios_ips basic
training (config-ips-category-action)# retired false
training (config-ips-category-action)# exit
training(config-ips-category)# exit
Do you want to accept these changes? [confirm]y
training(config)#
Step 4.5 Enable IPS rule on the desired interface and direction:
interface <interface name>
ip ips <rule name> <in | out>
training(config)#interface vlan 1
training(config-if)#ip ips myips in
training(config-if)#exit
training(config)#exit
training#
Additional Commands and References
Cisco IOS IPS Configuration Guide:
http://www.cisco.com/en/US/products/ps6441/products_feature_guide09186a0080747eb0.html
5 Loading Signatures to Cisco IOS IPS
The last step is to load the signatures into Cisco IOS IPS. In the following example, we start a
TFTP server on the PC and put the Cisco IOS IPS signature package under the TFTP directory.
Please refer to the Additional Commands and References section for more about TFTP servers
and alternative methods of loading Cisco IOS IPS signatures.
If using a Telnet session, turn on the terminal monitor to view the console output.
training#terminal monitor
Step 5.1 Save your router configuration.
training#copy running-config startup-config
Destination filename [startup-config]?
Building configuration...
[OK]
