E-38
Cisco Intrusion Prevention System Appliance Hardware Installation Guide for IPS 7.1
OL-24002-01
Appendix E Troubleshooting
Troubleshooting the Appliance
Upgrade History:
IPS-K9-7.1-3-E4 00:30:07 UTC Wed Nov 16 2011
Recovery Partition Version 1.1 - 7.1(3)E4
Host Certificate Valid from: 16-Nov-2011 to 16-Nov-2013
sensor#
Step 3 If the MainApp displays Not Running, the ARC has failed. Contact TAC.
For More Information
For more information on IPS system architecture, refer to System Architecture.
Verifying ARC Connections are Active
If the State is not Active in the ARC statistics, there is a problem.
To verify that the State is Active in the statistics, follow these steps:
Step 1 Log in to the CLI.
Step 2 Verify that the ARC is connecting. Check the State section of the output to verify that all devices are
connecting.
sensor# show statistics network-access
Current Configuration
LogAllBlockEventsAndSensors = true
EnableNvramWrite = false
EnableAclLogging = false
AllowSensorBlock = false
BlockMaxEntries = 250
MaxDeviceInterfaces = 250
NetDevice
Type = Cisco
IP = 10.89.147.54
NATAddr = 0.0.0.0
Communications = telnet
BlockInterface
InterfaceName = fa0/0
InterfaceDirection = in
State
BlockEnable = true
NetDevice
IP = 10.89.147.54
AclSupport = uses Named ACLs
Version = 12.2
State = Active
sensor#
Step 3 If the ARC is not connecting, look for recurring errors.
sensor# show events error hh:mm:ss month day year | include : nac
Example
sensor# show events error 00:00:00 Apr 01 2011 | include : nac
Comments to this Manuals