Table of Contents
Advertisement
Chapter 3
Configuring Router and Switch Devices
Add and Configure a Cisco Switch in MARS
MARS monitors Cisco switches running either CatOS or Cisco IOS 12.2.
To add the configuration information that MARS uses to monitor a Cisco switch running Cisco IOS 12.2
or later, follow these steps:
Step 1
Select Admin > System Setup > Security and Monitor Devices > Add.
Step 2
Do one of the following:
•
•
Step 3
Enter the name of the device in the Device Name field.
MARS maps this name to the reporting IP address. This name is used in topology maps, queries, and in
the Security and Monitoring Device list. For devices that support the discovery operation, such as routers
and firewalls, MARS renames this field's value to match the name discovered in the device
configuration, which typically uses the hostname.domain format. For devices that cannot be discovered,
such as Windows and Linux hosts and host applications, MARS uses the provided value.
(Optional) To enable MARS to discover settings from this device, enter the administrative IP address in
Step 4
the Access IP field.
To learn more about the access IP address, its role, and dependencies, see
Reporting IP, and Interface Settings, page
Enter the IP address of the interface that publishes syslog messages, SNMP notifications, NetFlow
Step 5
MIBs, or any combination of the three, in the Reporting IP field.
To learn more about the reporting IP address, its role, and dependencies, see
Reporting IP, and Interface Settings, page
If you entered an address in the Access IP field, select SNMP, TELNET, SSH, or FTP from the Access
Step 6
Type list, and continue with the procedure that matches your selection:
•
•
•
•
For more information on determining the access type, see
(Optional) To enable MARS to retrieve MIB objects for this reporting device, enter the device's
Step 7
read-only community string in the SNMP RO Community field.
Before you can specify the SNMP RO string, you must define an access IP address. MARS uses the
SNMP RO string to read MIBs related to a reporting device's CPU usage, network usage, and device
anomaly data and to discover device and network settings .
Step 8
(Optional) To enable MARS to monitor this device for anomalous resource usage, select Yes from the
Monitor Resource Usage list.
Result: MARS monitors the device for anomalous consumption of resources, such as memory and CPU.
If anomalies are detected, MARS generates an incident. Resource utilization statistics are also used to
generate reports. For more information, see
78-17020-01
If the switch is running any version of CatOS, select Cisco Switch-CatOS ANY from the Device
Type list.
If the switch is running Cisco IOS 12.2 or later, select Cisco Switch-IOS 12.2 from the Device Type
list.
Configure SNMP Access for Devices in MARS, page 2-11
Configure Telnet Access for Devices in MARS, page 2-11
Configure SSH Access for Devices in MARS, page 2-12
Configure FTP Access for Devices in MARS, page 2-12
2-8.
2-8.
Selecting the Access Type, page
Configuring Resource Usage Data, page
User Guide for Cisco Security MARS Local Controller
Cisco Switch Devices
Understanding Access IP,
Understanding Access IP,
2-10.
2-41.
3-13
Advertisement
Table of Contents
Troubleshooting
