Table of Contents
Advertisement
Cisco IDS 3.1 Sensors
Figure 6-4
Step 4
Once you've edited these four files (organizations, hosts, routes, and destinations), reboot the sensor
using the following commands:
a.
b.
Add and Configure a Cisco IDS 3.1 Device in MARS
To add and configure a Cisco IDS device in MARS, follow these steps:
Step 1
Click Admin > System Setup > Security and Monitor Devices > Add.
Select Cisco IDS 3.1 from the Device Type list.
Step 2
Enter the hostname of the sensor in the Device Name field.
Step 3
The Device Name value must be identical to the configured sensor name.
Enter the administrative IP address in the Access IP field.
Step 4
Enter the administrative IP address in the Reporting IP field.
Step 5
The Reporting IP address is the same address as the administrative IP address.
Step 6
Select either SSH or TELNET.
Step 7
Enter "netrangr" as the Login and its Password.
When adding a Cisco IDS 3.1 device, use the netrangr username or some other username that is not the
root login for the sensor. Using the root login causes MARS to fail to parse the login prompt correctly,
which in turn, cause the Test Connectivity to fail.
User Guide for Cisco Security MARS Local Controller
6-4
Add MARS Information to Cisco IDS 3.1 Destinations File
nrstop
nstart
Chapter 6
Configuring Network-based IDS and IPS Devices
78-17020-01
Advertisement
Table of Contents
Troubleshooting
