connect nm-cids to ciscoworks

[ahmadabuzayyad]

i need to know which ip i will use when i have to connect NM-CIDS with the ciscoworks

either the interface fa0/0 or ids-sensor or the ip address that assign in sensor setup or which one

the second question: port fa0/0 connect to the hub for sesing or not ?

[Fernando_Meza]

Hi ... access your sensor and type in show config ... you will see the host-ip address .. that is the one that needs to be entered on Ciscoworks for management. You also need to allow access from the Ciscoworks server to the sensor by modifying the access under network settings.

You can use any other interface for sensing

I hope it helps .. please rate if it does !!!

[Fernando_Meza · Accepted solution]

I forgot to mention that f0/0 interface on the CIDS module needs to be connected to your LAN as this is the management interface. and so the IP address and defautl gateway configured from the setup interactive config needs to be on your LAN range. For sensing you need to enter the below command from the ROUTER's interface mode. Traffic will be copied from this interface to the module for inspection

ids-service-module monitoring

I hope it helps ...