Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor, Руководство по установке и настройке

Страница: 246 / 450

Chapter 10 Configuring the Sensor Using the CLI
Sensor Configuration Tasks
10-50
Cisco Intrusion Detection System Appliance and Module Installation and Configuration Guide Version 4.1
78-15597-02
Step 10
View your changes:
sensor(config-vsc-virtualSensor-ATO-sig)# show settings
The settings for this signature are displayed. In the example above, the settings
for the destination port parameter would appear as
DstPort: 2139 default:
2140
.
Step 11
To return any value to the default setting, type the keyword default before the
parameter name.
For example, to return the destination port to 2140 (the default value), type the
following command:
sensor(config-vsc-virtualSensor-ATO-sig)# default dstport
The port value is returned to the default value and settings for the destination port
parameter appear as
DstPort: 2140 <defaulted>
.
Step 12
Exit tuning mode for this signature:
sensor(config-vsc-virtualSensor-ATO-sig)# exit
sensor(config-vsc-virtualSensor-ATO)# exit
sensor(config-vsc-virtualSensor)# exit
Apply Changes?:[yes]:
Step 13
Type yes to apply the changes.
The
Processing config:
message is displayed.
Step 14 Exit virtual sensor configuration mode:
sensor(config-vsc)# exit
sensor(config)#
IP Logging
You can manually configure the sensor to capture all IP traffic associated with a
host you specify by IP address. You can specify in minutes how long you want the
IP traffic to be logged at the IP address, and/or how many packets you want
logged, and/or how many bytes you want logged. The sensor stops logging IP
traffic at the first parameter you specify.