Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Datový list stáhnout pdf (Strana 107)

642-531

5.sensor(config)#service virtual-sensor-configuration virtualSensor

sensor(config-vsc)#reset-signatures string.tcp

QUESTION 244

You work as network security administrator at the Certkiller .com office inWashington DC. Certkiller is

now installing new Cisco IDS Sensors and you are responsible to configure them to permit remote access

only from trusted hosts. Perform this task on one of the Sensors using the CLI (Command Line

Interface). Refer to the following information and network topology exhibit to permit access from the

IDS MC management station only to the Sensor.

Note: Since this is a new installation, you will also need to remove the default allowed network address.

Verify your configuration settings prior to saving, and the save your configuration when finished.

Cisco IDS Paramaters Settings

Sensor operator username/password Certkiller op/ Certkiller 1918

Sensor administrator username/password Certkiller admin/ Certkiller 1918

Sensor IP address: 192.168.1.50/24

Default allowed network address: 10.0.0.0/8

Task: Click on the picture of the host connected to an IDS Sensor by a serial console cable shown in the

diagram as a dotted line. Select the Cisco Terminal Option and make the appropriate configuration

tasks.

Answer:

Explanation:

sensor#configure terminal

sensor(config)#service host (Enters Host Configuration mode)

sensor(config-Host)#networkParams (Enter Network Parameters Configuration mode)

sensor(config-Host-net)# no accessList ipAddress 10.0.0.0 netmask 255.0.0.0 (Removes the default allowed

network address)

sensor(config-Host-net)# accessList ipAddress192.168.1.51 (Allows only the IDS MC to access the Sensor)

sensor(config-Host-net)# show settings (Verify changes)

sensor(config-Host-net)# exit (Exits Network Parameters Configuration mode)

sensor(config-Host)# exit (Exits Configure Host mode)

Apply Changes:?[yes]: (Press Enter to apply the changes)

1 2 ... 102 103 104 105 106 107 108 109 110 111 112 ... 122 123

Žádné komentáře

Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Datový list Strana 107