Table of Contents
Advertisement
Generic Router Device
Add and Configure an ExtremeWare Switch in MARS
To add and configure an ExtremeWare switch in MARS, follow these steps:
Step 1
Select Admin > System Setup > Security and Monitor Devices > Add.
Step 2
Select Extreme ExtremeWare 6.x from the Device Type list.
Enter the name of the device in the Device Name field.
Step 3
MARS maps this name to the reporting IP address. This name is used in topology maps, queries, and in
the Security and Monitoring Device list. For devices that support the discovery operation, such as routers
and firewalls, MARS renames this field's value to match the name discovered in the device
configuration, which typically uses the hostname.domain format. For devices that cannot be discovered,
such as Windows and Linux hosts and host applications, MARS uses the provided value.
(Optional) To enable MARS to discover settings from this device, enter the administrative IP address in
Step 4
the Access IP field.
To learn more about the access IP address, its role, and dependencies, see
Reporting IP, and Interface Settings, page
Enter the IP address of the interface that publishes syslog messages, SNMP notifications, or both in the
Step 5
Reporting IP field.
To learn more about the reporting IP address, its role, and dependencies, see
Reporting IP, and Interface Settings, page
If you entered an address in the Access IP field, select SNMP from the Access Type list.
Step 6
For more information on understanding the access type, see
Step 7
(Optional) To enable MARS to retrieve MIB objects for this reporting device, enter the device's
read-only community string in the SNMP RO Community field.
Before you can specify the SNMP RO string, you must define an access IP address. MARS uses the
SNMP RO string to read MIBs related to a reporting device's CPU usage, network usage, and device
anomaly data and to discover device and network settings .
To add this device to the MARS database, click Submit.
Step 8
Result: The submit operation records the changes in the database tables. However, it does not load the
changes into working memory of the MARS Appliance. The activate operation loads submitted changes
into working memory.
Click Activate.
Step 9
Result: MARS begins to sessionize events generated by this device and evaluate those events using the
defined inspection and drop rules. Any events published by the device to MARS before activation can
be queried using the reporting IP address of the device as a match criterion.
Generic Router Device
You can add any L2 or L3 device to the MARS as long as SNMP is enabled on the device. A generic
router refers to any L2 or L3 device that is not listed in the Supported Devices and Software Versions for
CS-MARS Local Controller 4.1.
User Guide for Cisco Security MARS Local Controller
3-18
Chapter 3
2-8.
2-8.
Selecting the Access Type, page
Configuring Router and Switch Devices
Understanding Access IP,
Understanding Access IP,
2-10.
78-17020-01
Advertisement
Table of Contents
Troubleshooting
