Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual page 44

Initializing the Sensor
Type
Step 12
yes
The current interface configuration appears:
Current interface configuration
Command control: GigabitEthernet0/1
Unused:
GigabitEthernet2/1
GigabitEthernet2/0
Promiscuous:
GigabitEthernet0/0
Inline:
None
Type
Step 13
yes
Type the interface you want to add, for example,
Step 14
Type
Step 15
yes
Type the inline pair name.
a.
Type the inline pair description.
b.
The default is
Type the name of the first interface in the inline pair,
c.
d. Type the name of the second interface in the inline pair,
Your configuration appears with the following options:
[0] Go to the command prompt without saving this config.
[1] Return back to the setup without saving this config.
[2] Save this configuration and exit setup.
Type
Step 16
2
Enter your selection[2]: 2
Configuration Saved.
Type
Step 17
yes
Note
Type the local date (yyyy-mm-dd).
a.
Type the local time (hh:mm:ss).
b.
Step 18 Reboot the sensor:
sensor# reset
Warning: Executing this command will stop all applications and reboot the node.
Continue with reset? []:
Step 19 Type
yes
Step 20 Display the self-signed X.509 certificate (needed by TLS):
sensor# show tls fingerprint
MD5: C4:BC:F2:92:C2:E2:4D:EB:92:0F:E4:86:53:6A:C6:01
SHA1: 64:9B:AC:DE:21:62:0C:D3:57:2E:9B:E5:3D:04:8F:A7:FD:CD:6F:27
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
3-6
to modify the virtual sensor configuration (vs0).
to add a promiscuous or monitoring interface.
to add inline pairs (appears only if your platform supports inline pairs).
Created via setup by user <yourusername>
to save the configuration.
to modify the system date and time.
This option is not available on modules or when NTP has been configured. The modules get their
time from the router or switch in which they are installed, or from the configured NTP server.
to continue the reboot.
Chapter 3
.
GigabitEthernet0/1
.
.
interface1
.
interface2
Initializing the Sensor
78-16527-01