Cisco Systems ASA 5500 Manual De Usuario

Descargar
Página de 16
 
19-4
Cisco Security Appliance Command Line Configuration Guide
OL-8629-01
Chapter 19      Managing the AIP SSM and CSC SSM
  Managing the AIP SSM
hostname(config-cmap)# match access-list IPS
hostname(config-cmap)# policy-map my-ids-policy
hostname(config-pmap)# class my-ips-class
hostname(config-pmap-c)# ips promiscuous fail-close
hostname(config-pmap-c)# service-policy my-ips-policy global
Sessioning to the AIP SSM and Running Setup
After you have completed configuration of the ASA 5500 series adaptive security appliance to divert 
traffic to the AIP SSM, session to the AIP SSM and run the setup utility for initial configuration.
Note
You can either session to the SSM from the adaptive security appliance (by using the session 1 
command) or you can connect directly to the SSM using SSH or Telnet on its management interface. 
Alternatively, you can use ASDM.
To session to the AIP SSM from the adaptive security appliance, perform the following steps:
Step 1
Enter the session 1 command to session from the ASA 5500 series adaptive security appliance to the AIP 
SSM:
hostname# session 1
Opening command session with slot 1.
Connected to slot 1. Escape character sequence is 'CTRL-^X'.
Step 2
Enter the username and password. The default username and password are both cisco.
Note
The first time you log in to the AIP SSM you are prompted to change the default password. 
Passwords must be at least eight characters long and not a dictionary word.
login: cisco
Password:
Last login: Fri Sep  2 06:21:20 from xxx.xxx.xxx.xxx
***NOTICE***
This product contains cryptographic features and is subject to United States
and local country laws governing import, export, transfer and use. Delivery
of Cisco cryptographic products does not imply third-party authority to import,
export, distribute or use encryption. Importers, exporters, distributors and
users are responsible for compliance with U.S. and local country laws. By using
this product you agree to comply with applicable laws and regulations. If you
are unable to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
***LICENSE NOTICE***
There is no license key installed on the system.
Please go to http://www.cisco.com/go/license
to obtain a new license or install a license.
AIP SSM#