Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual page 177

Chapter 10 Configuring Blocking
To allow the sensor to block itself, follow these steps:
Log in to the CLI using an account with administrator privileges.
Step 1
Enter network access submode:
Step 2
sensor# configure terminal
sensor(config)# service network-access
Enter general submode:
Step 3
sensor(config-net)# general
Configure the sensor to block itself:
Step 4
sensor(config-net-gen)# allow-sensor-block true
By default, this value is false.
Verify the settings:
Step 5
sensor(config-net-gen)# show settings
general
-----------------------------------------------
--MORE--
Configure the sensor not to block itself:
Step 6
sensor(config-net-gen)# allow-sensor-block false
Verify the setting:
Step 7
sensor(config-net-gen)# show settings
general
-----------------------------------------------
78-16527-01
log-all-block-events-and-errors: true <defaulted>
enable-nvram-write: false <defaulted>
enable-acl-logging: false <defaulted>
allow-sensor-block: true default: false
block-enable: true default: true
block-max-entries: 100 default: 250
max-interfaces: 250 <defaulted>
master-blocking-sensors (min: 0, max: 100, current: 0)
-----------------------------------------------
-----------------------------------------------
never-block-hosts (min: 0, max: 250, current: 1)
-----------------------------------------------
ip-address: 11.11.11.11
-----------------------------------------------
-----------------------------------------------
never-block-networks (min: 0, max: 250, current: 1)
-----------------------------------------------
ip-address: 12.12.0.0/16
-----------------------------------------------
-----------------------------------------------
block-hosts (min: 0, max: 250, current: 0)
-----------------------------------------------
log-all-block-events-and-errors: true <defaulted>
enable-nvram-write: false <defaulted>
enable-acl-logging: false <defaulted>
allow-sensor-block: false default: false
block-enable: true default: true
block-max-entries: 100 default: 250
max-interfaces: 250 <defaulted>
master-blocking-sensors (min: 0, max: 100, current: 0)
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
Configuring Blocking Properties
10-5