Interface pairs subneting

[teymur azimov]

i have one IPS 4255 sensor and one catalyst switch. i deploy ips interface pairs and connecting two vlan 33 22. i want to learn that.

the vlans (33 and 22) must be same subnet????? or different subnet at interface pairs mode???

because i do same subnet at interface pairs , it works and i do different subnet at interface pairs it is not work.

please write your comment.

[rhermes]

The in-line interface pairs of the Cisco IPS sensor are transparent to traffic. You can think of the sensor as a "bump in the wire". Since there is no layer 3 routing intelligence in the sensor, there is nothing that would pass traffic between two different subnets on a pair of in-line interfaces. Both interfaces need to be addressed within the same subnet.

- Bob

[teymur azimov]

ok. thanks. i know the ips not do layer 3 routing.  if i want configurate 2 switch and this switch interface access or trunk mode and ips is inline interface pair mode.at this application also the user must be the same subnet. am i rigth?

[rhermes]

Yes you are right, access mode on both switch interfaces and all users on both switches need to be in the same subnet.

- Bob