topic Re: IPS and Switching in Network Security https://community.cisco.com/t5/network-security/ips-and-switching/m-p/803055#M86199 <HTML><HEAD></HEAD><BODY><P></P><P>Yes - you are approaching this correctly.</P><P></P><P>On the sensor, you need to be sure to complete the Vlan pairing so it will act as a L2 bridge between Vlans 2 &amp; 3.</P><P></P><P></P><P>The other option is to do IPS on a stick, where you trunk 2 &amp; 3 down a single physical interface to the 4215.</P><P></P><P></P><P>Let us know how your project proceeds.</P><P></P><P>thxs</P><P>peter</P></BODY></HTML> Wed, 18 Jul 2007 03:03:00 GMT pcomeaux 2007-07-18T03:03:00Z IPS and Switching https://community.cisco.com/t5/network-security/ips-and-switching/m-p/803054#M86198 <P>Hello I have a theoretical question about vlan and IPS </P><P></P><P>suppose have an 4215 and a router. I want to run the ips with interface inline mode. </P><P></P><P>Would this here work fine ?</P><P></P><P>Router - WAN </P><P> - Ethernet Vlan 2</P><P></P><P>4215 </P><P>-Ethernet 2 -&gt; Vlan 2 </P><P>-Ethernet 3 Vlan 3 </P><P></P><P>-Inside network all in Vlan 3 </P><P></P><P>Would the IPS bridge if all were in the same subnet ? </P><P></P><P>Cisco says </P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a00807517bb.html#wp1046883" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a00807517bb.html#wp1046883</A></P><P>If the paired interfaces are connected to the same switch, you should configure them on the switch as access ports with different access VLANs for the two ports. Otherwise, traffic does not flow through the inline interface.</P><P></P><P></P><P>Since I haven't read anything about deployment I had to ask to be 100% sure</P> Sun, 10 Mar 2019 10:42:21 GMT https://community.cisco.com/t5/network-security/ips-and-switching/m-p/803054#M86198 Rodrigo Gurriti 2019-03-10T10:42:21Z Re: IPS and Switching https://community.cisco.com/t5/network-security/ips-and-switching/m-p/803055#M86199 <HTML><HEAD></HEAD><BODY><P></P><P>Yes - you are approaching this correctly.</P><P></P><P>On the sensor, you need to be sure to complete the Vlan pairing so it will act as a L2 bridge between Vlans 2 &amp; 3.</P><P></P><P></P><P>The other option is to do IPS on a stick, where you trunk 2 &amp; 3 down a single physical interface to the 4215.</P><P></P><P></P><P>Let us know how your project proceeds.</P><P></P><P>thxs</P><P>peter</P></BODY></HTML> Wed, 18 Jul 2007 03:03:00 GMT https://community.cisco.com/t5/network-security/ips-and-switching/m-p/803055#M86199 pcomeaux 2007-07-18T03:03:00Z