Hello Members,
i have installed a IPS Module on a router. Unfortunately the interface i use to access the router is in a VRF and i can't access the service module in this scenario. Here is the router config.
interface IDS-Sensor1/0
ip vrf forwarding CENTRAL
ip unnumbered GigabitEthernet0/0.100
service-module fail-open
!
hold-queue 60 out
end
interface GigabitEthernet0/0.100
description CONNECTION TO VRF CENTRAL
encapsulation dot1Q 100
ip vrf forwarding CENTRAL
ip address 172.16.2.14 255.255.255.248
ip flow ingress
ip flow egress
ids-service-module monitoring inline access-list 100
no cdp enable
end
and here the IPS module network config
network-settings
host-ip 172.16.2.13/29,172.16.2.9
telnet-option disabled
access-list 0.0.0.0/0
i get this error message when i try to access to module
Router01#service-module iDS-Sensor 1/0 session
Trying 172.16.2.14, 2067 ...
% Destination unreachable; gateway or host down
thanks for your feedback in advanced
alex
