Verifying Idsm-2 Installation - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Verifying IDSM-2 Installation

4.
5.
You should carefully consider whether you want to create a service account. The service account
Caution
provides shell access to the system, which makes the system vulnerable. However, you can use the
service account to create a new password if the Administrator password is lost. Analyze your situation
to decide if you want a service account existing on the system.
6.
7.
8.
9.
10.
Verifying IDSM-2 Installation
Verify that the switch acknowledges IDSM-2 and has brought it online.
To verify the installation, follow these steps:
Log in to the console.
Step 1
For Catalyst software:
Step 2
cat6k> (enable) show module
Mod Slot Ports Module-Type
--- ---- ----- ------------------------- ------------------- --- --------
1
15
2
3
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
15-2
Configure IDSM-2 to capture traffic for intrusion analysis.
For the procedures, see Configuring the Catalyst Series 6500 Switch for IDSM-2 in Promiscuous
Mode, page 15-7, and Configuring the Catalyst Series 6500 Switch for IDSM-2 in Inline Mode,
page 15-16. For the procedure for configuring IDSM-2 to run in promiscuous or inline mode, see
Chapter 5, "Configuring Interfaces."
Reset Interface, page 15-7. For the procedure for configuring load balancing for IDSM-2 using
Cisco IOS software, see Configuring EtherChanneling, page
Create the service account.
A service account is needed for password recovery and other special debug situations directed by
TAC.
For the procedure, see Creating the Service Account, page
Perform the other initial tasks, such as adding users, trusted hosts, and so forth.
For the procedures, see Chapter 4, "Initial Configuration Tasks."
Configure intrusion prevention.
For the procedures, see Chapter 6, "Configuring Event Action Rules," Chapter 7, "Defining
Signatures," and Chapter 10, "Configuring Blocking."
Perform miscellaneous tasks to keep IDSM-2 running smoothly.
For the procedures, see Chapter 13, "Administrative Tasks for the Sensor,"
for IDSM-2, page 15-24.
Upgrade the IPS software with new signature updates and service packs.
For more information, see
Reimage the application partition and the maintenance partition when needed.
For the procedures, see Installing the IDSM-2 System Image, page
1 2 1000BaseX Supervisor
1 1 Multilayer Switch Feature WS-F6K-MSFC
2 48 10/100BaseTX Ethernet
3 48 10/100/1000BaseT Ethernet WS-X6548-GE-TX
For information on the TCP reset interface, see
Obtaining Cisco IPS Software, page
Model
WS-X6K-SUP1A-2GE
WS-X6248-RJ-45
Chapter 15 Configuring IDSM-2
Using the TCP
15-20.
4-13.
and Administrative Tasks
18-1.
17-25.
Sub Status
yes ok
no ok
no ok
no ok
78-16527-01