Configuring Os Fingerprinting - Cisco SCE 8000 10GBE Software Configuration Manual

Chapter 6 Global Configuration

Configuring OS Fingerprinting

By default, the OS fingerprinting feature is disabled. When OS fingerprinting is enabled, you can also
configure the following OS fingerprinting parameters:
•
•
•
•
•
•
•
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
DETAILED STEPS
Command
Step 1 enable
Example:
SCE> enable
Step 2 configure
Example:
SCE# configure
Step 3 interface linecard
Example:
SCE(config)# interface linecard 0
OL-30621-02
Sampling window—How long flows from a subscriber are fingerprinted
Sampling interval—Interval between OS fingerprinting sampling windows
OS fingerprinting is done for "sampling window" seconds every "sampling interval" minutes.
NAT detection window—Time period within which detecting multiple operating systems for the
same subscriber or IP address triggers NAT identification
OS flush time–Time interval after which OS information is flushed from the system
Signature file—Name of OS fingerprint signature file
Scan port—Port used for opening OS fingerprinting flows
GX reporting—Enable sending subscriber OS information in Gx messages
enable
configure
interface linecard 0
os-fingerprinting
(Optional) os-fingerprinting sampling window window interval interval
(Optional) os-fingerprinting NAT-detection-window time
(Optional) os-fingerprinting os-flush-time time
(Optional) os-fingerprinting signature-file filename
(Optional) os-fingerprinting scan-port port#
(Optional) os-fingerprinting gx-report
OS Fingerprinting and NAT Detection
Purpose
Enables privileged EXEC mode. Enter your password
when prompted.
Enters global configuration mode.
Enters interface linecard configuration mode.
Cisco SCE 8000 10GBE Software Configuration Guide
6-31