Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Installation And Configuration Manual page 267

Chapter 10 Configuring the Sensor Using the CLI
Note
Step 6 Specify the sensor's NAT address:
sensor(config-NetworkAccess-cat)# nat-address
Note
Step 7 Specify the VLAN number:
sensor(config-NetworkAccess-cat)# shun-interfaces vlan
Add the preShun ACL name (optional):
Step 8
sensor(config-NetworkAccess-cat-shu)# pre-acl-name
Add the postShun ACL name (optional):
Step 9
sensor(config-NetworkAccess-cat-shu)# post-acl-name
Step 10 Exit shun device configuration submode:
sensor(config-NetworkAccess-cat-shu)# exit
sensor(config-NetworkAccess-cat)# exit
sensor(config-NetworkAccess)# exit
sensor(config)# exit
Apply Changes:?[yes]:
Note
Step 11 Type yes to apply changes.
Cisco Intrusion Detection System Appliance and Module Installation and Configuration Guide Version 4.1
78-15597-02
If you are using DES or 3DES, you must use the command ssh host-key
ip_address to accept the key or NAC cannot connect to the device.
This changes the IP address in the first line of the ACL from the sensor's
address to the NAT address.
You receive an error if the logical device name does not exist.
Sensor Configuration Tasks
nat_address
vlan_number
pre_shun_acl_name
post_shun_acl_name
10-71