Cisco WS-X6381-IDS - Intrusion Detection System Module User Manual download pdf

Lab 10.9.1 Configure a Catalyst 6000 IDSM

Objective

In this lab exercise you will complete the following tasks:

■ Initialize the Catalyst 6000 IDSM.

■ Configure the Catalyst 6000 Family switch to capture traffic for Intrusion

Detection analysis.

■ Add the IDSM to an existing network topology in CSPM.

■ Apply a signature update to the IDSM application partition.

■ Transfer the IDSM System Status report to your CSPM host.

Visual Objective

The following figure displays the configuration you will complete in this lab

exercise.

Pod P

Your Pod

Pod Q

Peer Pod

172.30.1.0/24

e0/1

e0/0

.10P

10.0.P.0 /24

CSPM

10.0.P.3

Host ID = 3, Org ID = P

Host Name = cspmP,

Org Name = podP

sensorP

idsmP

e0/1

e0/0

10.0.Q.0 /24

.10Q

sensorQ

idsmQ

CSPM

10.0.Q.3

Host ID = 3, Org ID = Q

Host Name = cspmQ,

Org Name = podQ

Setup

Before starting this lab exercise, set up your equipment so that you can ensure you

have connectivity to the switch that you are going to configure. Verify that your

pod has an FTP server with a public directory with write privileges for file

transfers.

Directions

Your task in this lab exercise is to configure the Catalyst 6000 Family switch and

IDSM to detect alarms and send alarm notifications to CSPM. Then you will add

the IDSM to an existing CSPM network topology. Follow the convention where

P=pod number and PVLAN=300 + P. For example, student pod 3 would have

PVLAN= 303. Your instructor will assign your Module number, M, and the IP

address of the switch, SW.

1 2 3 4 5 6 7 8

Summary of Contents

Page 1 - Directions

Lab 10.9.1 Configure a Catalyst 6000 IDSM Objective In this lab exercise you will complete the following tasks: Initialize the Catalyst 6000 IDS

Page 2 - Task 1—Initialize the IDSM

10-2 Cisco Secure Intrusion Detection System 2.1Lab 10.9.1 Copyright  2001, Cisco Systems, Inc. Your instructor will provide you with the values

Page 3

Copyright  2001, Cisco Systems, Inc. Cisco Secure Intrusion Detection System 2.1Lab 10.9.1 10-3 Parameter Value Director’s heart beat interval K

Page 4

10-4 Cisco Secure Intrusion Detection System 2.1Lab 10.9.1 Copyright  2001, Cisco Systems, Inc. switch#(enable) commit security acl SPAN_PVLAN (w

Page 5 - Task 4—Add the IDSM to CSPM

Copyright  2001, Cisco Systems, Inc. Cisco Secure Intrusion Detection System 2.1Lab 10.9.1 10-5 Sensor version is : 2.5(1)S1 ! Sensor application

Page 6

10-6 Cisco Secure Intrusion Detection System 2.1Lab 10.9.1 Copyright  2001, Cisco Systems, Inc. Sensor’s host id 6 Sensor’s organization id P (

Page 7

Copyright  2001, Cisco Systems, Inc. Cisco Secure Intrusion Detection System 2.1Lab 10.9.1 10-7 Step 4 Apply the signature update. Your instruct

Page 8 - Completion Criteria

10-8 Cisco Secure Intrusion Detection System 2.1Lab 10.9.1 Copyright  2001, Cisco Systems, Inc. Completion Criteria You completed this lab exerc

Comments to this Manuals

No comments

Cisco WS-X6381-IDS - Intrusion Detection System Module User Manual

Browse online or download User Manual for Networking Cisco WS-X6381-IDS - Intrusion Detection System Module. Lab 10.9.1 Configure a Catalyst 6000 IDSM

Summary of Contents

Comments to this Manuals

Related products and manuals for Networking Cisco WS-X6381-IDS - Intrusion Detection System Module