Router(config)#ip ips signature 5037 0 delete Deletes the signature with
ID 5037 and subsignature
0. The signature is
removed from the SDF the
next time the signatures
are reloaded or saved.
Router(config)#ip ips signature 6190 0 list 145 Applies ACL 145 to
signature 6190,
subsignature 0 for speci?¬?c
packet scanning
Router(config)#ip ips name NEW-IPS list 123 Creates an IPS rule named
NEW-IPS and applies ACL
123 for further scrutiny of
scanned packets
Router(config)#interface fastethernet 0/0 Moves to interface
con?¬?guration mode
Con?¬?guring Cisco IOS IPS from the SDM 165
Con?¬?guring Cisco IOS IPS from the SDM
SDM provides a useful set of wizards to con?¬?gure IPS. To access these wizards, click
the Con?¬?gure button on the top of the SDM home page, and then click the Intrusion
Prevention icon in the Tasks toolbar to display the window shown in Figure 6-24.
Figure 6-24 Intrusion Prevention System Home Page
Router(config-if)#ip ips NEW-IPS in Applies the IPS rule at the
interface, loads the
signatures, and builds the
signature engines
NOTE: The original
IPS name ROUTER-IPS
could be used, but the
ip ips name command
must be executed
again to map the new
SDF into the IPS. If the
original IPS name is
remapped, it does not
need to be reapplied to
the interface.
Pages:
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135