Cisco IDS 4210 10/100 SENSOR 规格指南
1-4
Installing Cisco Intrusion Prevention System Appliances and Modules 5.1
OL-8677-01
Chapter 1 Introducing the Sensor
How the Sensor Functions
Command and Control Interface
The command and control interface has an IP address and is used for configuring the sensor. It receives
security and status events from the sensor and queries the sensor for statistics.
security and status events from the sensor and queries the sensor for statistics.
The command and control interface is permanently enabled. It is permanently mapped to a specific
physical interface, which depends on the specific model of sensor. You cannot use the command and
control interface as either a sensing or alternate TCP reset interface.
physical interface, which depends on the specific model of sensor. You cannot use the command and
control interface as either a sensing or alternate TCP reset interface.
lists the command and control interfaces for each sensor.
Sensing Interfaces
Sensing interfaces are used by the sensor to analyze traffic for security violations. A sensor has one or
more sensing interfaces depending on the sensor. For the number and type of sensing interfaces available
for each sensor, see
more sensing interfaces depending on the sensor. For the number and type of sensing interfaces available
for each sensor, see
Sensing interfaces can operate individually in promiscuous mode or you can pair them to create inline
interfaces for inline sensing mode. For more information, see
interfaces for inline sensing mode. For more information, see
Note
On appliances, all sensing interfaces are disabled by default. You must enable them to use them. On
modules, the sensing interfaces are permanently enabled.
modules, the sensing interfaces are permanently enabled.
Some appliances support optional PCI interface cards that add sensing interfaces to the sensor. You must
insert or remove these optional cards while the sensor is powered off. The sensor detects the addition or
removal of a supported interface card. If you remove an optional PCI card, some of the interface
configuration is deleted, such as the speed, duplex, description string, enabled/disabled state of the
interface, and any inline interface pairings. These settings are restored to their default settings when the
card is reinstalled. However, the assignment of promiscuous and inline interfaces to the Analysis Engine
is not deleted from the Analysis Engine configuration, but is ignored until those cards are reinserted and
you create the inline interface pairs again. For more information, refer to “Analysis Engine,” in
insert or remove these optional cards while the sensor is powered off. The sensor detects the addition or
removal of a supported interface card. If you remove an optional PCI card, some of the interface
configuration is deleted, such as the speed, duplex, description string, enabled/disabled state of the
interface, and any inline interface pairings. These settings are restored to their default settings when the
card is reinstalled. However, the assignment of promiscuous and inline interfaces to the Analysis Engine
is not deleted from the Analysis Engine configuration, but is ignored until those cards are reinserted and
you create the inline interface pairs again. For more information, refer to “Analysis Engine,” in
Installing
Table 1-1
Command and Control Interfaces
Sensor
Command and Control Interface
IDS-4210
FastEthernet0/1
IDS-4215
FastEthernet0/0
IDS-4235
GigabitEthernet0/1
IDS-4250
GigabitEthernet0/1
IPS-4240
Management0/0
IPS-4255
Management0/0
IPS-4260
Management0/0
NM-CIDS
FastEthernet0/0
AIP-SSM-10
GigabitEthernet0/0
AIP-SSM-20
GigabitEthernet0/0
IDSM-2
GigabitEthernet0/2