Hi guys,
It seems to me like the documentation says we can load the signature
definition file via the command "ip ips sdf location .." , as reported by
[1] below, but this seems to be not supported on the box.
Well, I went ahead and configured my IPS policy on the router, but as it
were, I could not enable the icmp echo and echo-reply signatures (2000 and
2004).
Any help/pointers would be very helpful.
Thanks,
Sadiq
R6(config)#ip ips ?
auto-update Auto Update
config Location of IPS configuration files
deny-action Specify Deny action
event-action-rules Event Action Rules (SEAP)
fail Specify what to do during any failures
name Specify an IPS rule
notify Specify the notification mechanisms (SDEE or log)
for
the alarms
signature-category Signature Category
signature-definition Signature Definition
R6#
R6#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R6(config)#ip ips si
R6(config)#ip ips signature-de
R6(config)#ip ips signature-definition
R6(config-sigdef)#si
R6(config-sigdef)#signature 2000 0
Unable to locate sig 2000:0
R6(config-sigdef)#si
R6(config-sigdef)#signature ?
<1-65535> Signature ID value
R6(config-sigdef)#signature
% Incomplete command.
R6(config-sigdef)#
R6(config-sigdef)#
R6(config-sigdef)#end
R6#
R6#
R6#dir
May 15 22:57:44.932: %SYS-5-CONFIG_I: Configured from console by console
R6#dir
Directory of flash:/
1 -rw- 5650 May 8 2010 16:40:48 +00:00 -0
2 -rw- 5650 May 8 2010 17:10:14 +00:00 -1
3 -rw- 5834 May 8 2010 23:02:20 +00:00 -2
4 -rw- 5834 May 8 2010 23:10:14 +00:00 -3
5 -rw- 1823 Feb 22 2007 09:09:30 +00:00 sdmconfig-2811.cfg
13 drw- 0 May 15 2010 22:32:30 +00:00 IPS
6 -rw- 833024 Feb 22 2007 09:10:16 +00:00 es.tar
7 -rw- 1052160 Feb 22 2007 09:10:34 +00:00 common.tar
8 -rw- 1038 Feb 22 2007 09:10:50 +00:00 home.shtml
9 -rw- 102400 Feb 22 2007 09:11:04 +00:00 home.tar
*10 -rw- 491213 Feb 22 2007 09:11:22 +00:00 128MB.sdf*
11 -rw- 398305 Feb 22 2007 09:12:04 +00:00
sslclient-win-1.1.0.154.pkg
12 -rw- 60324084 Mar 19 2010 11:03:00 +00:00
c2800nm-adventerprisek9_sna-mz.124-24.T1.bin
64016384 bytes total (733184 bytes free)
R6#
R6#sh ver | i IOS
Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9_SNA-M), Version
12.4(24)T1, RELEASE SOFTWARE (fc3)
R6#
Blogs and organic groups at http://www.ccie.net
Received on Sat May 15 2010 - 23:47:43 ART
This archive was generated by hypermail 2.2.0 : Tue Jun 01 2010 - 07:09:53 ART