Intrusion Sensor; Intrusion Snort - Alcatel-Lucent OmniAccess 700 CLI Command Reference Manual

Left running head:
Chapter name (automatic)
Intrusion Detection System

INTRUSION SENSOR

intrusion sensor <name> snort [no threshold|threshold <1-
4294967295> <1-4294967295>]}
D
ESCRIPTION
Enter this command in the Firewall configuration mode. This command is used to
create an IDS sensor based on Snort.
Use 'threshold' keyword to configure the threshold for the sensor.
Use 'no threshold' keyword to remove threshold configured for the sensor.
P
ARAMETER
name
1-4294967295
1-4294967295
no threshold
E
XAMPLE
ALU(config)#firewall
ALU(config-firewall)#intrusion sensor sensor1 snort threshold
10 1000
ALU(config-firewall-intrusion-sensor-sensor1)#

INTRUSION SNORT

intrusion snort
D
ESCRIPTION
Enter this command in the Firewall configuration mode. This command enters the
snort configuration mode.
P
ARAMETER
None.
E
XAMPLE
ALU(config)# firewall
ALU(config-firewall)# intrusion snort
ALU(config-firewall-intrusion-snort)#
712
Beta
Parameter
Alcatel-Lucent
Description
Name of the sensor.
Threshold number. This denotes the
number of packets to be sent every
second.
This denotes the threshold time in
milliseconds inside which if the specified
threshold number of packets are
received, those packets are treated as
attacks.
Remove threshold from sensor.
OmniAccess 700 CLI Command Reference Guide
Beta