topic Re: IDSM-2 Upgrade in Network Security

IDSM-2 Upgrade

dinesh.das — Sun, 10 Mar 2019 11:09:25 GMT

Hi,

I am upgrading IDSM-2 image from v5 to v6 (IPS-K9-6.0-4a-E1.pkg) after this upgrade do we need to go for the Upgradation of Recovery Partition ?

Thank you,

Dinesh

Re: IDSM-2 Upgrade

Farrukh Haroon — Tue, 17 Jun 2008 06:31:50 GMT

The recovery partition will be automatically upgraded to IPS-K9-6.0-4a-E1. The maintenance partition will not be I think. This is an output from an IPS upgraded earlier:

Application Partition:

Cisco Intrusion Prevention System, Version 6.0(4a)E1

......

Maintenance Partition Version 2.1(2)

Recovery Partition Version 1.1 - 6.0(4a)E1

Regards

Farrukh

Re: IDSM-2 Upgrade

dinesh.das — Tue, 17 Jun 2008 06:37:56 GMT

Hi Farrukh,

Thank you for prompt reply.

Dinesh

Re: IDSM-2 Upgrade

dinesh.das — Wed, 18 Jun 2008 03:23:03 GMT

Hi Farrukh,

what about Hardware bypass, do we need any additional harware (4 Gb bypasscard) or my IDSM-2 does have it by default.

Actually, I am planning for the VLAN pair Inline mode configuration and I am worried about the dataflow during signature or patch update.

Regards

Dinesh

Re: IDSM-2 Upgrade

Farrukh Haroon — Wed, 18 Jun 2008 07:07:50 GMT

The IDSM-2 has no hardware interfaces. It is internally connected to the switch backplane. I've done signature updates before on this platform without any issues. It will lets packets pass through (by default) when the signature engine is down.

Regards

Farrukh

Re: IDSM-2 Upgrade

dinesh.das — Fri, 27 Jun 2008 10:23:55 GMT

Hi Farrukh,

My upgradation is copleted sucfuly. and it is working on SPAN with 6509.

but i am not able to create more than one SPAN session on my 6500 switch, is there any limitation, and what about if i want to create more than one SPAN session on 6500 switch.

Dinesh

Re: IDSM-2 Upgrade

Farrukh Haroon — Fri, 27 Jun 2008 10:30:53 GMT

Have a look at this link:

http://www.cisco.com/warp/public/473/41.html#topic6

Regards

Farrukh

Re: IDSM-2 Upgrade

dinesh.das — Wed, 02 Jul 2008 04:40:34 GMT

Hi farrukh,

I am trying for Licence from cisco.com, If i clik on UPDATE Liceance from cisco.com tab, one pop up is comming on and massage is ** Sending serial number to cisco*** but nothing is happening for an hours also.

Re: IDSM-2 Upgrade

Farrukh Haroon — Sun, 06 Jul 2008 13:08:44 GMT

Try to manual process through the CLI then.

Regards

Farrukh

Re: IDSM-2 Upgrade

dinesh.das — Thu, 10 Jul 2008 04:21:57 GMT

Hi Farrukh,

I dont have IPS service contract to download the licen file and this one is not updated before upgradation.

It could be a problem ?

Without IPS service contr it will not allow us to go for Licencing ?

In my invoice only these two line iteam it thr. WS-SVC-IDSM2-BUN-K9 and SC-SVC-IDSM-5.1-K9, do you think that it should be with IPS service contract like line iteam ---PAK-- ---

Please help me, I am new to this device.

Regards.

Dinesh

Re: IDSM-2 Upgrade

saed — Mon, 14 Jul 2008 12:56:22 GMT

Please i need help...I have WS-SVC-IDS2-BUN-K9 ...I need to cover it with service contract that permit us to upgrade and get license...Please advice level of service we need .

thanks in advance

Omar

Re: IDSM-2 Upgrade

dinesh.das — Tue, 15 Jul 2008 05:58:01 GMT

Hi Omar,

as i know we can upgrade the IDSM with latest one without any license.. but i am not sure about, hot to get the licens without service contract.

I think farruk can guide us on this, but it seems that he is not available since long time....

Re: IDSM-2 Upgrade

Farrukh Haroon — Tue, 15 Jul 2008 09:31:47 GMT

Hi Dinesh

Sorry I'm on vacation right now 🙂

You will get a license file once you purchase a 'Cisco Services for IPS' contract for the IDSM-2 blade. Then you have to load that license on your sensor. Software upgrades work without a valid license. Signature updated don't work. They install and then re-install themselves after detecting that no license is present.

Regards

Farrukh

Re: IDSM-2 Upgrade

dinesh.das — Fri, 18 Jul 2008 09:11:52 GMT

Hi Farrukh,

I am done with the configuration and i kept in Inline VLAN pair VLAN 16 & 166, i created on L2 vlan and 166, and assinged the same to the Virtual interface,

But i am not able to see any logs or blocking, If i keep this vlan 16 on SPAN i do have lot of logs and traffic on sensore interface.

any a Suggestion .....

Re: IDSM-2 Upgrade

Farrukh Haroon — Fri, 18 Jul 2008 11:45:12 GMT

Have you seen this link?

http://www.cisco.com/en/US/products/sw/secursw/ps2113/products_configuration_example09186a0080876d9f.shtml

Regards

Farrukh

Re: IDSM-2 Upgrade

dinesh.das — Sat, 19 Jul 2008 11:26:12 GMT

Hi,

Every thing is same as shown in document, but i am not able to see any logs, If i keep same vlan on SPAN logs are there.

Any trouble shooting steps or tools are there ?

Re: IDSM-2 Upgrade

Farrukh Haroon — Sat, 19 Jul 2008 16:03:52 GMT

If you Inline VLAN Pair is not functional, then no traffic will pass through anyway. You can try to ping between any two devices in the 'bridged' VLANS.

Regards

Farrukh

Re: IDSM-2 Upgrade

dinesh.das — Wed, 23 Jul 2008 04:34:31 GMT

My configuration is like this,

firewall vlan-group 2 10,100

Vlan 10 Inside & Vlan 100 is outsie interface of the FW Context,

I created on L2 Vlan 101

and added this VLAN (10 and 101) in VLAN PAIR config and this interface giga 0/8.1 (Subinterface). same interface is config for Virtual Sensor 0.

I dont have problem with traffic but not able to see any logs.

Re: IDSM-2 Upgrade

dinesh.das — Thu, 24 Jul 2008 06:04:40 GMT

Re: IDSM-2 Upgrade

Farrukh Haroon — Sat, 26 Jul 2008 09:58:50 GMT

In which mode is the sensor operating?

Auto/Bypass etc.

Regards

Farrukh