Cisco CS-MARS-20-K9 - Security MARS 20, Руководство пользователя

Страница: 383 / 588

19-19
User Guide for Cisco Security MARS Local Controller
78-17020-01
Chapter 19 Incident Investigation and Mitigation
Layer 2 Path and Mitigation Configuration Example
For example, given a topology such as the one in the preceding figure, follow these instructions to
discover these devices.
Procedures for Layer 2 Path and Mitigation
Add the Cisco Catalyst 5000 with SNMP as the Access Type.
Step 1
Click Admin > Security and Monitor Devices > Add .
Figure 19-15 Configure Cisco Switch CatOS
Step 2
From the Device Type drop-down list, select Cisco Switch-CatOS ANY .
Step 3
Enter the Device Name of the switch.
Step 4
Enter the Access IP address and Reporting IP address (the IP address of the device as it appears to the
MARS) of the switch. The Reporting IP address is usually the same as the Access IP address, but if you
are using FTP as Access Type, it must be a different IP address. The Reporting IP address is required
if the device is sending syslog data to the MARS
Step 5
From the Access Type drop-down list, select SNMP or TELNET . Note that which fields need to be
completed, along with which you can complete, depend on which Access Type you select.
SNMP :
–
For the Login ID, enter the user name and Password needed to access the switch.
–
For Enable Password , enter the password to get into Cisco enable mode.