Changing The Access List - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Chapter 4 Initial Configuration Tasks
Verify that Telnet is enabled:
Step 4
sensor(config-hos-net)# show settings
network-settings
-----------------------------------------------
-----------------------------------------------
sensor(config-hos-net)#
Step 5 Exit network settings mode:
sensor(config-hos-net)# exit
sensor(config-hos)# exit
Apply Changes:?[yes]:
Step 6 Press Enter to apply the changes or type
To Telnet to the sensor, you must enable Telnet and configure the access list to allow the Telnet clients
Note
to connect. For the procedure, See

Changing the Access List

Use the
list, the list of hosts or networks that you want to have access to your sensor. Use the no form of the
command to remove an entry from the list. The default access list is empty.
The following hosts must have an entry in the access list:
•
•
•
•
•
To modify the access list, follow these steps:
Log in to the sensor using an account with administrator privileges.
Step 1
Enter network settings mode:
Step 2
sensor# configure terminal
sensor(config)# service host
sensor(config-hos)# network-settings
78-16527-01
host-ip: 10.89.130.108/23,10.89.130.1
default: 10.1.9.201/24,10.1.9.1
host-name: sensor default: sensor
telnet-option: enabled default: disabled
access-list (min: 0, max: 512, current: 1)
-----------------------------------------------
network-address: 0.0.0.0/0
-----------------------------------------------
-----------------------------------------------
ftp-timeout: 300 seconds <defaulted>
login-banner-text: <defaulted>
ip_address/netmask command in the service host submode to configure the access
access-list
Hosts that need to Telnet to your sensor.
Hosts that need to use SSH with your sensor.
Hosts, such as IDM, that need to access your sensor from a web browser.
Management stations, such as VMS, that need access to your sensor.
If your sensor is a master blocking sensor, the IP addresses of the blocking forwarding sensors must
have an entry in the list.
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
to discard them.
no
Changing the Access List, page
Changing Network Settings
4-5.
4-5