Unable To See Alerts - Cisco IPS-4255-K9 - Intrusion Protection Sys 4255 Installation Manual

Chapter A Troubleshooting
Media Type = TX
Link Status = Up
Link Speed = Auto_100
Link Duplex = Auto_Full
Total Packets Received = 1830137
Total Bytes Received = 131624465
Total Multicast Packets Received = 20
Total Receive Errors = 0
Total Receive FIFO Overruns = 0
Total Packets Transmitted = 220052
Total Bytes Transmitted = 103796666
Total Transmit Errors = 0
Total Transmit FIFO Overruns = 0
sensor#
If the Link Status is down, make sure the sensing port is connected properly.
Step 3
a.
b.
Step 4 Verify the interface configuration.
a.
b.
Step 5 Verify again that the interfaces are up and that the packet count is increasing.
sensor# show interfaces
For More Information
•
•
•

Unable to See Alerts

If you are not seeing alerts, try the following:
•
•
•
•
OL-18504-01
Make sure the sensing port is connected properly on the appliance.
Make sure the sensing port is connected to the correct SPAN or VACL capture port on the IDSM2.
Make sure you have the interfaces configured properly.
Verify the SPAN and VACL capture port configuration on the Cisco switch. Refer to your switch
documentation for the procedure.
For the procedure for properly installing the sensing interface on your sensor, refer to the chapter on
your appliance in this document.
For the procedure for connecting SPAN and VACL capture ports on the IDSM2, refer to
the IDSM2.
For the procedures for configuring interfaces on your sensor, refer to
Make sure the signature is enabled
Make sure the signature is not retired
Make sure that you have Produce Alert configured as an action
If you choose Produce Alert, but come back later and add another event action and do not
Note
add Produce Alert to the new configuration, alerts are not sent to the Event Store. Every time
you configure a signature, the new configuration overwrites the old one, so make sure you
have configured all the event actions you want for each signature.
Make sure the sensor is seeing packets
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.0
Troubleshooting the Appliance
Configuring
Configuring Interfaces.
A-33