Cisco Cisco Catalyst 6500 Cisco 7600 Router Anomaly Guard Module
5
Release Note for the Cisco Anomaly Guard Module
OL-16151-03
Maximum Number of Modules Supported in a Switch or Router
Maximum Number of Modules Supported in a Switch or Router
A switch or router 9-slot chassis supports a combined maximum of eight Anomaly Guard modules and
Traffic Anomaly Detector modules. You can install a maximum of eight Guard modules or a maximum
of four Detector modules in a single chassis in any combination for a total of eight modules.
Traffic Anomaly Detector modules. You can install a maximum of eight Guard modules or a maximum
of four Detector modules in a single chassis in any combination for a total of eight modules.
A switch or router 13-slot chassis supports a combined maximum of 10 Anomaly Guard modules and
Traffic Anomaly Detector modules. You can install a maximum of eight Guard modules or a maximum
of four Detector modules in a single chassis in any combination for a total of 10 modules.
Traffic Anomaly Detector modules. You can install a maximum of eight Guard modules or a maximum
of four Detector modules in a single chassis in any combination for a total of 10 modules.
Operating Considerations
The following operating considerations apply to the Guard module:
•
The copy ftp command supports active mode only.
•
The Guard module operates using a self-protection configuration to protect itself from DDoS attacks
on the network. Cisco configures the self-protection configuration with a set of default parameter
values, which you can modify.
on the network. Cisco configures the self-protection configuration with a set of default parameter
values, which you can modify.
When upgrading the Guard module to software version 6.1(x) from a version previous to 5.1(5), the
existing self-protection configuration is overwritten by the new configuration contained in the
upgrade. If you had modified the self-protection configuration of the previously installed software,
you need to make the same modifications to the new self-protection configuration. Do not copy your
original self-protection configuration to the Guard module because the original configuration will
block access to one or both of the following ports when attempting to access the module through an
inline interface:
existing self-protection configuration is overwritten by the new configuration contained in the
upgrade. If you had modified the self-protection configuration of the previously installed software,
you need to make the same modifications to the new self-protection configuration. Do not copy your
original self-protection configuration to the Guard module because the original configuration will
block access to one or both of the following ports when attempting to access the module through an
inline interface:
–
Ports 3220 and 1334 if you upgrade from version prior to 5.1(5). Port 3220 was added to
software version 5.0(x) and 5.1(x). Port 1334 was added to software version 5.1(5).
software version 5.0(x) and 5.1(x). Port 1334 was added to software version 5.1(5).
If you upgrade from software version 5.1(5) or later after modifying the self-protection
configuration, your changes to the configuration remain intact. Upgrading from software version
5.1(5) to software version 5.1(x) or later will also leave your modified self-protection configuration
intact.
configuration, your changes to the configuration remain intact. Upgrading from software version
5.1(5) to software version 5.1(x) or later will also leave your modified self-protection configuration
intact.
•
The Guard module must be running software version 6.1(x) to operate with the Cisco MultiDevice
Manager software version 1.5(1).
Manager software version 1.5(1).
•
Downgrading software versions is not supported.