Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor, Руководство по установке и настройке

Страница: 219 / 450

10-23
Cisco Intrusion Detection System Appliance and Module Installation and Configuration Guide Version 4.1
78-15597-02
Chapter 10 Configuring the Sensor Using the CLI
Sensor Initial Configuration Tasks
Note
Remember the NTP server’s key ID and key values. You will need them along
with the NTP server’s IP address when you configure the sensor to use the NTP
server as its time source. See
Configuring the Sensor to Use an NTP Server as its
Time Source, page 10-21 , for this procedure.
To set up a Cisco router to act as an NTP server, follow these steps:
Step 1
Log in to the router.
Step 2
Enter configuration mode:
router# configure terminal
Step 3
Create the key ID and key value:
router(config)# ntp authentication-key
key-ID
md5
key-value
The key ID can be a number between 1 and 65535. The key value is text (numeric
or character). It is later encrypted.
For example:
router(config)# ntp authentication-key 100 attack
Note The sensor only supports MD5 keys.
Note Keys may already exist on the router. Use the show running
configuration command to check for other keys. You can use those values
for the trusted key in Step 4.
Step 4
Designate the key you just created in Step 3 as the trusted key (or use an existing
key):
router(config)# ntp trusted-key
key-ID
The trusted key ID is the same number as the key ID in Step 3. For example:
router(config)# ntp trusted-key 100
Step 5 Type the interface on the router that the sensor will communicate with: