how i configurate IDM at IPS 4255

[teymur azimov]

hi .i want to test my IPS and i want to connect my pc to ips and do configuration with IDM.i do some way but i can not connect.

1.how i configurate IDM at IPS 4255 version 7.0.

2.which ips  interface i directly connect my pc.

please help me.

[Jennifer Halim]

1. You would need to have Management0/0 interface configured with IP Address and connect this interface to your network which is accessible from your PC.

2. You would have to also allow your PC ip addres to access the IPS. The command is "access-list "

If this IPS has not been initialised, you can follow the steps here:

http://www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/idm/idm_initializing.html

Hope this helps.

[teymur azimov]

H.i Thank you to help me.

as you wrote me configurate ip address of management interface but i can not find how to configurated ip address of management interface.

[Jennifer Halim]

Are you console into the IPS?

As advised earlier, if this is a brand new IPS that has not been initialised, then follow the steps in the URL:

http://www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/idm/idm_initializing.html

Run the "setup" command once you are in, and it will prompt you to configure the management ip address.

[teymur azimov]

yes i  console into IPS. this is my config.

service interface

physical-interfaces GigabitEthernet0/0

admin-state enabled

subinterface-type inline-vlan-pair

subinterface 1

description PAIR1

vlan1 33

vlan2 101

exit

exit

exit

physical-interfaces GigabitEthernet0/1

admin-state enabled

exit

exit

! ------------------------------

service authentication

exit

! ------------------------------

service event-action-rules rules0

exit

! ------------------------------

service host

network-settings

host-ip 172.17.55.14/24,172.17.55.1

host-name IPS4

telnet-option disabled

access-list 172.17.55.0/24

access-list 172.20.70.12/32

exit

time-zone-settings

offset 0

standard-time-zone-name UTC

exit

i connect console into IPS. 172.20.70.12 ip addressof  my pc.which this pc is directly connected ips MGMT interface.i assign my pc ip 172.20.70.12 and subnet mask 255.255.255.255 and no default gateway.172.17.55.14 is my ips sensor ip which i want to connect idm with https at my pc.

am i do rigth connection and configuration?

[Jennifer Halim]

You would need to connect your PC to the network and configure default gateway so that you can reach 172.17.55.14 from your PC.

172.17.55.14 is the IPS management ip address.

If you connect the IPS management ip address directly to your pc, then your pc needs to be in the same subnet as the configured management ip address, ie: in the 172.17.55.0/24 subnet.