Cisco Cisco ASA 5515-X Adaptive Security Appliance - No Payload Encryption 설치 가이드
9
Step 5
In the Cisco Account Password area, set the password for the username cisco and confirm it.
The username cisco and this password are used for Telnet sessions from hosts specified by the
management access list and when accessing the IPS module from ASDM (Configuration >
IPS). By default, the password is cisco.
The username cisco and this password are used for Telnet sessions from hosts specified by the
management access list and when accessing the IPS module from ASDM (Configuration >
IPS). By default, the password is cisco.
Step 6
In the Network Participation area, for participating in SensorBase data sharing, click Full,
Partial, or Off.
Partial, or Off.
Step 7
Click Next to advance through the remaining screens, and complete the wizard.
ASA 5505
Use ASDM to configure basic IPS network configuration. These settings are saved to the IPS
configuration, not the ASA configuration.
configuration, not the ASA configuration.
Step 1
Choose Configuration > Device Setup > SSC Setup.
Step 2
In the Management Interface area, set the following:
a.
Choose the Interface VLAN from the drop-down list. This setting lets you manage the ASA
IPS module using this VLAN. By default, the management VLAN is VLAN 1 (the inside
interface).
IPS module using this VLAN. By default, the management VLAN is VLAN 1 (the inside
interface).
b.
Enter the IPS management IP address. Make sure this address is on the same subnet as the
ASA VLAN IP address. For example, if you assigned 10.1.1.1 to the VLAN for the ASA, then
assign another address on that network, such as 10.1.1.2, for the IPS management address.
By default, the address is 192.168.1.2.
ASA VLAN IP address. For example, if you assigned 10.1.1.1 to the VLAN for the ASA, then
assign another address on that network, such as 10.1.1.2, for the IPS management address.
By default, the address is 192.168.1.2.
c.
Choose the subnet mask from the drop-down list.
d.
Enter the default gateway IP address. Set the gateway to be the ASA IP address for the
management VLAN. By default, this IP address is 192.168.1.1.
management VLAN. By default, this IP address is 192.168.1.1.
Step 3
In the Management Access List area, enter the following:
a.
Enter the IP address for the management host network, typically the same network as the
management IP address.
management IP address.
b.
Choose the subnet mask from the drop-down list.
c.
Click Add to add these settings to the Allowed Hosts/Networks list.
Step 4
In the IPS Password area, do the following:
a.
Enter the current password. The default password is cisco.
b.
Enter the new password, and confirm the change.
Step 5
Click Apply to save the settings to the running configuration.
Step 6
To launch the IPS Startup Wizard, click the Configure the IPS SSC module link.