Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Installation And Configuration Manual page 260

Sensor Configuration Tasks
Setting the Block Time
Note
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
Cisco Intrusion Detection System Appliance and Module Installation and Configuration Guide Version 4.1
10-64
You can change the amount of time the block lasts. The default is 30 minutes.
If you change the default block time, you are changing a signature parameter,
which affects all signatures. Because it affects all signatures, saving the change
can take a while.
To change the default block time, follow these steps:
Log in to the CLI using an account with administrator privileges.
Enter configuration mode:
sensor# configure terminal
Enter virtual sensor configuration mode:
sensor(config)# service virtual-sensor-configuration virtualSensor
Enter tuning submode:
sensor(config-vsc)# tune
Enter the shun event submode:
sensor(config-vsc-VirtualSensor)# shunevent
Configure the shun time:
sensor(config-vsc-VirtualSensor-Shu)# shuntime
The value is the time duration of the shun event in minutes (0-4294967295).
Exit shun event submode:
sensor(config-vsc-VirtualSensor-Shu)# exit
sensor(config-vsc-VirtualSensor)# exit
Apply Changes:?[yes]:
Chapter 10 Configuring the Sensor Using the CLI
value
78-15597-02