BST L4 Teoria.pdf

(1183 KB) Pobierz
BST Laboratorium IV
Systemy
ochrony przed włamaniami do sieci
IDS/IPS
Overview of Implementing IOS IPS
I want to use CLI to
manage my signature
files for IPS. I have
downloaded the IOS IPS
files.
1.
Download the IOS IPS
files
2.
Create an IOS IPS
configuration directory
on Flash
3.
Configure an IOS IPS
crytpo key
4.
Enable IOS IPS
5.
Load the IOS IPS
Signature Package to
the router
1. Download the Signature File
Download IOS IPS
signature package files
and public crypto key
2. Create Directory
R1# mkdir ips
Create directory filename [ips]?
Created dir flash:ips
R1#
R1# dir flash:
Directory of flash:/
5 -rw-
51054864 Jan 10 2009 15:46:14 -08:00
c2800nm-advipservicesk9-mz.124-20.T1.bin
6 drw-
0 Jan 15 2009 11:36:36 -08:00 ips
64016384 bytes total (12693504 bytes free)
R1#
To rename a directory:
R1# rename ips ips_new
Destination filename [ips_new]?
R1#
3. Configure the Crypto Key
1
2
R1# conf t
R1(config)#
1 – Highlight and copy the text contained in the public key file.
2 – Paste it in global configuration mode.
Zgłoś jeśli naruszono regulamin