Cisco IPS 7.1 Installation Manual page 350

Troubleshooting the Appliance
Upgrade History:
IPS-K9-7.1-3-E4
Recovery Partition Version 1.1 - 7.1(3)E4
Host Certificate Valid from: 16-Nov-2011 to 16-Nov-2013
sensor#
If the MainApp displays
Step 3
For More Information
For more information on IPS system architecture, refer to
Verifying ARC Connections are Active
If the State is not
To verify that the State is Active in the statistics, follow these steps:
Log in to the CLI.
Step 1
Verify that the ARC is connecting. Check the State section of the output to verify that all devices are
Step 2
connecting.
sensor# show statistics network-access
Current Configuration
LogAllBlockEventsAndSensors = true
EnableNvramWrite = false
EnableAclLogging = false
AllowSensorBlock = false
BlockMaxEntries = 250
MaxDeviceInterfaces = 250
NetDevice
State
BlockEnable = true
NetDevice
sensor#
If the ARC is not connecting, look for recurring errors.
Step 3
sensor# show events error hh:mm:ss month day year | include : nac
Example
sensor# show events error 00:00:00 Apr 01 2011 | include : nac
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.1
E-38
00:30:07 UTC Wed Nov 16 2011
Not Running
in the ARC statistics, there is a problem.
Active
Type = Cisco
IP = 10.89.147.54
NATAddr = 0.0.0.0
Communications = telnet
BlockInterface
InterfaceName = fa0/0
InterfaceDirection = in
IP = 10.89.147.54
AclSupport = uses Named ACLs
Version = 12.2
State = Active
, the ARC has failed. Contact TAC.
System Architecture.
Appendix E Troubleshooting
OL-24002-01