Accessing IPS Module in a VRF

alex.dersch — Sun, 10 Mar 2019 12:16:14 GMT

Hello Members,

i have installed a IPS Module on a router. Unfortunately the interface i use to access the router is in a VRF and i can't access the service module in this scenario. Here is the router config.

interface IDS-Sensor1/0
ip vrf forwarding CENTRAL
ip unnumbered GigabitEthernet0/0.100
service-module fail-open
!
hold-queue 60 out
end

interface GigabitEthernet0/0.100
description CONNECTION TO VRF CENTRAL
encapsulation dot1Q 100
ip vrf forwarding CENTRAL
ip address 172.16.2.14 255.255.255.248
ip flow ingress
ip flow egress
ids-service-module monitoring inline access-list 100
no cdp enable
end

and here the IPS module network config

network-settings
host-ip 172.16.2.13/29,172.16.2.9
telnet-option disabled
access-list 0.0.0.0/0

i get this error message when i try to access to module

Router01#service-module iDS-Sensor 1/0 session
Trying 172.16.2.14, 2067 ...
% Destination unreachable; gateway or host down

thanks for your feedback in advanced

alex

Re: Accessing IPS Module in a VRF

alex.dersch — Thu, 17 Feb 2011 20:09:28 GMT

it's working now. i had a vlan configuration error.

thanks anyways

alex

topic Re: Accessing IPS Module in a VRF in Network Security

Accessing IPS Module in a VRF

Re: Accessing IPS Module in a VRF