10-21
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.0
OL-18504-01
Chapter 10 Initializing the Sensor
Advanced Setup
Promiscuous:
GigabitEthernet0/7
GigabitEthernet0/8
Virtual Sensor: vs0
Anomaly Detection: ad0
Event Action Rules: rules0
Signature Definitions: sig0
[1] Edit Interface Configuration
[2] Edit Virtual Sensor Configuration
[3] Display configuration
Option:
Step 7
Enter
1
to edit the interface configuration.
Note
The following options let you create and delete interfaces. You assign the interfaces to virtual
sensors in the virtual sensor configuration. If you are using promiscuous mode for your
interfaces and are not subdividing them by VLAN, no additional configuration is necessary.
Note
The IDSM2 does not support the Add/Modify Inline Interface Pair Vlan Groups option. When
running an inline interface pair the two IDSM2 data ports are configured as access ports or a
trunk port carrying only the native VLAN. The packets do not have 802.1q headers and cannot
be separated by VLAN. To monitor multiple VLANs inline, use inline VLAN pairs.
[1] Remove interface configurations.
[2] Add/Modify Inline Vlan Pairs.
[3] Add/Modify Promiscuous Vlan Groups.
[4] Add/Modify Inline Interface Pairs.
[5] Modify interface default-vlan.
Option:
Step 8
Enter
3
to add promiscuous VLAN groups.
Available Interfaces
[1] GigabitEthernet0/7
[2] GigabitEthernet0/8
Option:
Step 9
Enter
2
to add VLAN groups to GigabitEthernet0/8.
Promiscuous Vlan Groups for GigabitEthernet0/8
None
Subinterface Number:
a.
Enter
10
to add subinterface 10.
Subinterface Number: 10
Description[Created via setup by user asmith]:
Select vlans:
[1] All unassigned vlans.
[2] Enter vlans range.
Option:
b.
Enter
1
to assign all unassigned VLANs to subinterface 10.
Subinterface Number:
c.
Enter
9
to add subinterface 9.
