168.10.53 Sends logging messages to
a syslog server host at
address 192.168.10.53
Router(config)#logging sysadmin Sends logging messages to
a syslog server host named
sysadmin
Router(config)#exit Returns to global
con?¬?guration mode
Router#show ip ips configuration Veri?¬?es that the IOS IPS is
properly con?¬?gured
Router#show ip ips signature Veri?¬?es the number of
signatures that are loaded
into each SME
Router#copy flash:attack-drop.sdf ips.sdf Merges the attack-drop.sdf
?¬?le with the default SDF
stored in memory
Router#copy ips.sdf flash:newsignatures.sdf Creates a new SDF in ?¬‚ash
that can now be used when
the router boots
164 Con?¬?guring Cisco IOS Intrusion Prevention System from the CLI
Disable, Delete, and Filter Selected Signatures Within an SDF
Change the Location of the SDF
Router#configure terminal Moves to global
con?¬?guration mode
Router(config)#ip ips sdf location
flash:newsignatures.sdf
Modi?¬?es the location of
the SDF
NOTE: This location
must be changed before
any modi?¬?cations to the
SDF can be performed.
Router(config)#ip ips signature 1107 0 disable Deactivates the signature
with ID 1107 and
subsignature 0. The
signature remains in the
SDF; it is just deactivated.
Pages:
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135