Ids Configuration Commands - Alcatel-Lucent OmniAccess 700 Cli Configuration Manual

Left running head:
Chapter name (automatic)
Intrusion Detection System
IDS C
ONFIGURATION
The following commands are used to configure IDS on the OA-700.
T C IDS S
O ONFIGURE AN
Note: The OA-700 supports Snort based sensors.
Command (in FwCM)
intrusion sensor <name> snort
[no threshold|threshold <1-
4294967295> <1-4294967295>]}
no intrusion sensor <name>
snort
E
XAMPLE
ALU(config)#firewall
ALU(config-firewall)# intrusion sensor sensor1 snort threshold
10 1000
ALU(config-firewall-intrusion-sensor-sensor1)#
ALU(config-firewall)# intrusion sensor sensor1 snort no
threshold
ALU(config-firewall)# no intrusion sensor sensor1 snort
822
Beta
C
OMMANDS
ENSOR
Alcatel-Lucent
Description
Use this command to create an
intrusion sensor based on snort. Enter
this command in the Firewall
configuration mode.
Use the 'threshold' keyword to
configure the threshold for the sensor.
Use the 'no threshold' keyword to
remove threshold configured for the
sensor.
Use this command to delete an
intrusion sensor.
Note: You cannot delete the
intrusion sensor if it is
attached to a firewall policy.
Detach the sensor from the
firewall policy before
deleting it.
CLI Configuration Guide
Beta