Cisco IPS-4255-K9 - Intrusion Protection Sys 4255 Installation Manual page 211

Chapter 10 Initializing the Sensor
Promiscuous:
GigabitEthernet0/7
GigabitEthernet0/8
Virtual Sensor: vs0
Anomaly Detection: ad0
Event Action Rules: rules0
Signature Definitions: sig0
[1] Edit Interface Configuration
[2] Edit Virtual Sensor Configuration
[3] Display configuration
Option:
Enter
Step 7
Note
Note
[1] Remove interface configurations.
[2] Add/Modify Inline Vlan Pairs.
[3] Add/Modify Promiscuous Vlan Groups.
[4] Add/Modify Inline Interface Pairs.
[5] Modify interface default-vlan.
Option:
Enter
Step 8
Available Interfaces
[1] GigabitEthernet0/7
[2] GigabitEthernet0/8
Option:
Step 9 Enter
Promiscuous Vlan Groups for GigabitEthernet0/8
None
Subinterface Number:
a. Enter
Subinterface Number: 10
Description[Created via setup by user asmith]:
Select vlans:
Option:
Enter
b.
Subinterface Number:
Enter
c.
OL-18504-01
to edit the interface configuration.
1
The following options let you create and delete interfaces. You assign the interfaces to virtual
sensors in the virtual sensor configuration. If you are using promiscuous mode for your
interfaces and are not subdividing them by VLAN, no additional configuration is necessary.
The IDSM2 does not support the Add/Modify Inline Interface Pair Vlan Groups option. When
running an inline interface pair the two IDSM2 data ports are configured as access ports or a
trunk port carrying only the native VLAN. The packets do not have 802.1q headers and cannot
be separated by VLAN. To monitor multiple VLANs inline, use inline VLAN pairs.
to add promiscuous VLAN groups.
3
to add VLAN groups to GigabitEthernet0/8.
2
to add subinterface 10.
10
[1] All unassigned vlans.
[2] Enter vlans range.
to assign all unassigned VLANs to subinterface 10.
1
to add subinterface 9.
9
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.0
Advanced Setup
10-21