Configuring Intrusion Prevention System (Ips) - Allied Telesis AR Series Technical Manual

Configuring Intrusion Prevention System (IPS)

Configuring Intrusion Prevention
System (IPS)
This is an example of how to configure IPS.
By default, IPS protection is disabled; you need to explicitly enable it.
To show the list of built-in categories that AlliedWare Plus IPS supports, use the command:
awplus#show ips categories
Step 1:
awplus#configure terminal
awplus(config)#ips
Step 2:
awplus(config-ips)#protect
Step 3:
To drop packets categorized as checksum, enter the follow command:
awplus(config-ips)#category checksum action deny
Step 4:
awplus#show ips
Output 1: Example output from the console
awplus#show ips
Status:
C613-22104-00 REV B
Enter the IPS mode.
Enable IPS protection.
(Optional) Configure action for a specified category.
Verify IPS configuration.
Enabled (Active)
Advanced Network Protection
Firewall/NAT Rules, Entities and Performance
|
Page 34