6-5
Installing Cisco Intrusion Prevention System Appliances and Modules 5.1
OL-8677-01
Chapter 6 Installing IPS-4260
Front and Back Panel Features
The following configuration restrictions apply to hardware bypass:
•
The 4-port bypass card is only supported on IPS-4260.
•
Fail-open hardware bypass only works on inline interfaces (interface pairs), not on inline VLAN
pairs.
•
Fail-open hardware bypass is available on an inline interface if all of the following conditions are
met:
–
Both of the physical interfaces support hardware bypass.
–
Both of the physical interfaces are on the same interface card.
–
The two physical interfaces are associated in hardware as a bypass pair.
–
The speed and duplex settings are identical on the physical interfaces.
–
Both of the interfaces are administratively enabled.
•
Autonegotiation must be set on MDI/X switch ports connected to IPS-4260.
You must configure both the sensor ports and the switch ports for autonegotiation for hardware
bypass to work. The switch ports must support MDI/X, which automatically reverses the transmit
and receive lines if necessary to correct any cabling problems. The sensor is only guaranteed to
operate correctly with the switch if both of them are configured for identical speed and duplex,
which means that the sensor must be set for autonegotiation too.
Front and Back Panel Features
This section describes the IPS-4260 front and back panel features and indicators.
Figure 6-3
shows the front view of IPS-4260.
Figure 6-3
IPS-4260 Front Panel Features
There are three switches on the front panel of IPS-4260:
•
Power—Toggles the system power.
•
Reset—Resets the system.
•
ID—Toggles the system ID indicator.
Cisco IPS 4260 series
Intrusion Prevention Sensor
POWER
STATUS
FLASH
ID
NIC
Power
Flash
Status
ID
NIC
RESET
ID
153095
POWER
RESET
ID