Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Datový list stáhnout pdf (Strana 109)

642-531

3. sensor# config terminal

sensor(config)#no username service (service is the username for service account)

4.sensor(config)# privilege user tessking operator

5. sensor(config)#service virtual-sensor-configuration virtualSensor

6. sensor(config-vsc)#reset-signatures ATOMIC.L3.TCP

QUESTION 246

Network topology exhibit/simulation

You work as a network security administrator at Certkiller .com. Certkiller is now installing new Cisco

IDS Sensors. You are required to configure these new Sensors so that they allow remote access only from

hosts that are trusted. You must execute this task on of the IDS Sensors using the CLI (Command Line

Interface). Use the information below and the network topology exhibit.

Permit access from IDS MC management station only to the sensor.

NOTICE: As this is a new installation, you must also remove the default allowed network address.

You are also required to verify your configuration settings before you save them. When you have saved

the configuration you are finished.

Cisco IDS Parameters Settings

Sensor operator username/password Certkiller operator/ Certkiller 789

Sensor administrator username password Certkiller admin/ Certkiller 789

Sensor IP address 172.16.30.31/24

Default allowed network address 10.0.0.0/8

Assignment: Click on the picture of the host connected to an IDS Sensor by a serial console cable shown

in the diagram as a dotted line. Select the Cisco Terminal Option and make the appropriate

configuration tasks.

Answer:

Explanation:

a. Enter configure terminal mode:

sensor# configure terminal

b. Enter host configuration mode:

sensor(config)# service host

c. Enter network parameters configuration mode:

sensor(config-Host)# networkParams

d. View the current settings:

1 2 ... 104 105 106 107 108 109 110 111 112 113 114 ... 122 123

Žádné komentáře

Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Datový list Strana 109