09-24-2011 02:39 AM - edited 03-10-2019 05:29 AM
I do a basic setup IPS 4260 inline with the topo.
I can access internet now. I can access IPS through IDM or https. And the IPS not work
after reset IPS, I get error:
***LICENSE NOTICE***
There is no license key installed on the IPS-4260.
The system will continue to operate with the currently installed
signature set. A valid license must be obtained in order to apply
signature updates. Please go to http://www.cisco.com/go/license
to obtain a new license or install a license.
Warning: MainApp has not started, please try again later.
Would you like to run cidDump?[no]:
I have try to use command with no lucky.
recover application-partition
If I use my laptop connect direct to the management 0/0 interface of IPS 4260 with the same ip subnet of IPS, I also cant not access IPS through https.
And the firewall has policy permit any any.
Pls help me
thank you
-------------------------------
my config:
IPS# sh config
! ------------------------------
! Current configuration last modified Thu Mar 25 08:58:02 2010
! ------------------------------
! Version 7.0(2)
! Host:
! Realm Keys key1.0
! Signature Definition:
! Signature Update S480.0 2010-03-24
! ------------------------------
service interface
physical-interfaces GigabitEthernet2/0
admin-state enabled
exit
physical-interfaces GigabitEthernet2/1
admin-state enabled
exit
inline-interfaces pairs
description Created via setup by user cisco
interface1 GigabitEthernet2/0
interface2 GigabitEthernet2/1
exit
exit
! ------------------------------
service authentication
exit
! ------------------------------
service event-action-rules rules0
exit
! ------------------------------
service host
network-settings
host-ip 10.200.2.250/26,10.200.2.254
host-name IPS
telnet-option enabled
access-list 10.0.0.0/8
dns-primary-server enabled
address 8.8.8.8
exit
dns-secondary-server disabled
dns-tertiary-server disabled
exit
time-zone-settings
offset 0
standard-time-zone-name UTC
exit
exit
! ------------------------------
service logger
exit
! ------------------------------
service network-access
exit
! ------------------------------
service notification
exit
! ------------------------------
service signature-definition sig0
exit
! ------------------------------
service ssh-known-hosts
exit
! ------------------------------
service trusted-certificates
exit
! ------------------------------
service web-server
port 443
exit
! ------------------------------
service anomaly-detection ad0
exit
! ------------------------------
service external-product-interface
exit
! ------------------------------
service health-monitor
exit
! ------------------------------
service global-correlation
exit
! ------------------------------
service analysis-engine
virtual-sensor vs0
logical-interface pairs
09-24-2011 07:19 AM
And
sh ver
Application Partition:
Cisco Intrusion Prevention System, Version 7.0(2)E4
Host:
Realm Keys key1.0
Signature Definition:
Signature Update S480.0 2010-03-24
OS Version: 2.4.30-IDS-smp-bigphys
Platform: IPS-4260-K9
Serial Number:
No license present
Sensor up-time is 6 min.
Using 1906278400 out of 4100345856 bytes of available memory (46% usage)
system is using 17.4M out of 38.5M bytes of available disk space (45% usage)
application-data is using 44.8M out of 166.8M bytes of available disk space (28% usage)
boot is using 41.6M out of 68.6M bytes of available disk space (64% usage)
application-log is using 494.0M out of 513.0M bytes of available disk space (96% usage)
MainApp B-BEAU_2009_OCT_15_08_07_7_0_1_111 (Ipsbuild) 2009-10-15T08:09:06-0500 Running
AnalysisEngine BE-BEAU_E4_2010_MAR_25_02_09_7_0_2 (Ipsbuild) 2010-03-25T02:11:05-0500 Running
CollaborationApp B-BEAU_2009_OCT_15_08_07_7_0_1_111 (Ipsbuild) 2009-10-15T08:09:06-0500 Running
CLI B-BEAU_2009_OCT_15_08_07_7_0_1_111 (Ipsbuild) 2009-10-15T08:09:06-0500
Upgrade History:
IPS-K9-7.0-2-E4 04:00:07 UTC Thu Mar 25 2010
Recovery Partition Version 1.1 - 7.0(2)E4
Host Certificate Valid from: 24-Oct-2008 to 25-Oct-2010
Pls help me
09-24-2011 09:40 AM
Now, I get better result
AFter do restore again.
I can access IPS through https (idm) if I connect direct my laptop to Mgmt interface.
I cant ping any ip add from IPS
and I cant ping IPS from router or PC clent (in the attatch file) or firewall.
So the ip 10.206.2.250/26,10.206.2.254 for out of band management only ?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide