IDSM-2 bypass for specific hosts - by the CLI

[Fernando_Meza]

                   Hi Netpros,

I have a situation where I need to bypass any inspection between two hosts. I currenlty have the IDSM-2 performing in-line VLAN pair. From reasons I can't currently detail I don't have access to the web interface and therefore need to perform this from the command line. Basically any comunication from host A ->to host B and from host B-> to host A needs NOT to be inspected at all as traffic traverses the IDSM-2.  Your assistance would be much appreciated.

Also, is there any way to clear the mac address table from the IDMS-2 using the CLI ?

[Todd Pula]

There is no way to configure the IDSM to accomplish this in an inline fashion.  In a promiscuous configuration, you could use a VACL to specify what specific traffic should be redirected to the module.  There is an open feature enhancement for this.

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtn71977

[Fernando_Meza]

Thanks

Sent from Cisco Technical Support iPad App