topic two switch connect to IPS in Network Security https://community.cisco.com/t5/network-security/two-switch-connect-to-ips/m-p/1677783#M56546 <HTML><HEAD></HEAD><BODY><P>Yes, the subnet on both switches needs to be the same because the IPS sensors is transparent. It should act just like a patch cable between the switches.</P><P></P><P>- Bob</P></BODY></HTML> Tue, 26 Jul 2011 15:35:57 GMT rhermes 2011-07-26T15:35:57Z two switch connect to IPS https://community.cisco.com/t5/network-security/two-switch-connect-to-ips/m-p/1677780#M56536 <P>hi. I want to connect two switch to ips sensor. i configurate ips at interface inline pairs mode. swicthes interface ar configurated access or trunk mode.</P><P>my question is that: is the vlan which pass througth the ips must be same at both switch at this application??</P><P>yes or not?</P> Sun, 10 Mar 2019 12:25:49 GMT https://community.cisco.com/t5/network-security/two-switch-connect-to-ips/m-p/1677780#M56536 teymur azimov 2019-03-10T12:25:49Z two switch connect to IPS https://community.cisco.com/t5/network-security/two-switch-connect-to-ips/m-p/1677781#M56539 <HTML><HEAD></HEAD><BODY><P>Teymur -</P><P></P><P>If you have configured your IPS sensor for in-line interface pairs, then the connections to your switches should be an access interface.</P><P>interface FastEthernet0/1</P><P> switchport access vlan 101</P><P></P><P>If you need to pass a trunk interface through your sensor, you have to change the sensor to in-line VLAN pairs. In this mode the sensor will not be fully transparent to traffic. It will translate incoming VLAN header tags to outgoing VLAN headers according to the VLAN pairs you create in the configuration.</P><P></P><P>- Bob</P></BODY></HTML> Tue, 26 Jul 2011 14:44:38 GMT https://community.cisco.com/t5/network-security/two-switch-connect-to-ips/m-p/1677781#M56539 rhermes 2011-07-26T14:44:38Z two switch connect to IPS https://community.cisco.com/t5/network-security/two-switch-connect-to-ips/m-p/1677782#M56541 <HTML><HEAD></HEAD><BODY><P> ok. if the switches access mode, the subnet must be same both swithes???</P></BODY></HTML> Tue, 26 Jul 2011 15:09:00 GMT https://community.cisco.com/t5/network-security/two-switch-connect-to-ips/m-p/1677782#M56541 teymur azimov 2011-07-26T15:09:00Z two switch connect to IPS https://community.cisco.com/t5/network-security/two-switch-connect-to-ips/m-p/1677783#M56546 <HTML><HEAD></HEAD><BODY><P>Yes, the subnet on both switches needs to be the same because the IPS sensors is transparent. It should act just like a patch cable between the switches.</P><P></P><P>- Bob</P></BODY></HTML> Tue, 26 Jul 2011 15:35:57 GMT https://community.cisco.com/t5/network-security/two-switch-connect-to-ips/m-p/1677783#M56546 rhermes 2011-07-26T15:35:57Z two switch connect to IPS https://community.cisco.com/t5/network-security/two-switch-connect-to-ips/m-p/1677784#M56550 <HTML><HEAD></HEAD><BODY><P>Actually you can connect IPS to Switch Trunk ports as well. You need to configure VLAN groups on IPS to be able to inspect traffic passing through.</P></BODY></HTML> Thu, 28 Jul 2011 08:57:39 GMT https://community.cisco.com/t5/network-security/two-switch-connect-to-ips/m-p/1677784#M56550 denizkaya 2011-07-28T08:57:39Z two switch connect to IPS https://community.cisco.com/t5/network-security/two-switch-connect-to-ips/m-p/1677785#M56553 <HTML><HEAD></HEAD><BODY><P>ok. i want to configurate vlan 10 20 30 40 at both switches and switces interface configurated as trunk.</P><P>ips sensor configurate at inline vlan group mode. </P><P>i configurate this config at ips like as:</P><P></P><P>for example 1 switch connect to ips ge0/0 interface.</P><P>i create two subinterface in ge0/0.</P><P>subinterface 1 vlan 10 and 20 and policy 1 or vs0.</P><P>subinterface 2 vlan 30 and 40 and policy 2 or vs1.</P><P></P><P>also do this configuration as the same in ge0/1 interface at ips.</P><P></P><P>am i di rigth configuration??</P></BODY></HTML> Thu, 28 Jul 2011 09:13:17 GMT https://community.cisco.com/t5/network-security/two-switch-connect-to-ips/m-p/1677785#M56553 teymur azimov 2011-07-28T09:13:17Z Re: two switch connect to IPS https://community.cisco.com/t5/network-security/two-switch-connect-to-ips/m-p/1677786#M56558 <HTML><HEAD></HEAD><BODY><P>Teymur</P><P></P><P>Please read this section on VLAN pairs to understand how they work:</P><P><A href="http://www.cisco.com/en/US/partner/docs/security/ips/7.0/configuration/guide/cli/cli_interfaces.html#wp1047718">http://www.cisco.com/en/US/partner/docs/security/ips/7.0/configuration/guide/cli/cli_interfaces.html#wp1047718</A></P><P></P><P>- Bob</P></BODY></HTML> Thu, 28 Jul 2011 15:12:42 GMT https://community.cisco.com/t5/network-security/two-switch-connect-to-ips/m-p/1677786#M56558 rhermes 2011-07-28T15:12:42Z