Device Access Issues - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Troubleshooting the 4200 Series Appliance
Make sure the interface and directions for each network device are correct.
Step 7
For the procedure, see
If the network device is using SSH-DES or SSH-3DES, make sure that you have enabled SSH
Step 8
connections to the device.
For the procedure, see
Verify that each interface and direction on each controlled device is correct.
Step 9
For the procedure see

Device Access Issues

Network Access Controller may not be able to access the devices it is managing. Make sure the you have
the correct IP address and username and password for the managed devices and the correct interface and
direction configured.
SSH devices must support SSH 1.5. The sensor does not support SSH 2.0.
Note
To troubleshoot device access issues, follow these steps:
Log in to the CLI.
Step 1
Verify the IP address for the managed devices:
Step 2
sensor# configure terminal
sensor (config)# service network-access
sensor(config-net)# show settings
general
-----------------------------------------------
-----------------------------------------------
user-profiles (min: 0, max: 250, current: 1)
-----------------------------------------------
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
C-18
Verifying the Interfaces and Directions on the Network Device, page
Enabling SSH Connections to the Network Device, page
Verifying the Interfaces and Directions on the Network Device, page
log-all-block-events-and-errors: true <defaulted>
enable-nvram-write: false <defaulted>
enable-acl-logging: false <defaulted>
allow-sensor-block: false <defaulted>
block-enable: true <defaulted>
block-max-entries: 250 <defaulted>
max-interfaces: 250 <defaulted>
master-blocking-sensors (min: 0, max: 100, current: 0)
-----------------------------------------------
-----------------------------------------------
never-block-hosts (min: 0, max: 250, current: 0)
-----------------------------------------------
-----------------------------------------------
never-block-networks (min: 0, max: 250, current: 0)
-----------------------------------------------
-----------------------------------------------
block-hosts (min: 0, max: 250, current: 0)
-----------------------------------------------
-----------------------------------------------
block-networks (min: 0, max: 250, current: 0)
-----------------------------------------------
-----------------------------------------------
profile-name: r7200
-----------------------------------------------
Appendix C Troubleshooting
C-19.
C-20.
C-19.
78-16527-01