Verifying Network Access Controller Connections Are Active - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Appendix C Troubleshooting

Verifying Network Access Controller Connections are Active

If the State is not
To verify that the State is Active in the statistics, follow these steps:
Log in to the CLI.
Step 1
Verify that Network Access Controller is connecting:
Step 2
Check the State section of the output to verify that all devices are connecting.
sensor# show statistics network-access
Current Configuration
LogAllBlockEventsAndSensors = true
EnableNvramWrite = false
EnableAclLogging = false
AllowSensorBlock = false
BlockMaxEntries = 250
MaxDeviceInterfaces = 250
NetDevice
State
BlockEnable = true
NetDevice
sensor#
If Network Access Controller is not connecting, look for recurring errors:
Step 3
sensor# show events error hh:mm:ss month day year | include : nac
Example:
sensor# show events error 00:00:00 Apr 01 2005 | include : nac
Make sure you have the latest software updates:
Step 4
sensor# show version
Upgrade History:
IDS-K9-maj-5.0-1-
Recovery Partition Version 1.1 - 5.0(1)S149
If you do not have the latest software updates, download them from Cisco.com. For the procedure, see
Obtaining Cisco IPS Software, page
Step 5 Read the Readme that accompanies the software upgrade for any known DDTS for Network Access
Controller.
Step 6 Make sure the configuration settings for each device are correct (the username, password, and IP
address).
For the procedure, see
78-16527-01
in the Network Access Controller statistics, there is a problem.
Active
Type = Cisco
IP = 10.89.147.54
NATAddr = 0.0.0.0
Communications = telnet
BlockInterface
InterfaceName = fa0/0
InterfaceDirection = in
IP = 10.89.147.54
AclSupport = uses Named ACLs
Version = 12.2
State = Active
14:16:00 UTC Thu Mar 04 2004
Device Access Issues, page
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
18-1.
C-18.
Troubleshooting the 4200 Series Appliance
C-17