Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
The SVR is on VL60, the PC is on VL80. So, PC(.25--VL81--GE0/7--VL80--SVI 80--SVI60--VL60--SVR(.10)Sensor interface GigabitEthernet0/7 is assigned to trunk all Vlans 1-4094CAT65K-PODX#sh ru | in intrusionintrusion-detection module 6 management-port a...
I have been unable to get the SVIs on a Catalyst 6506 Sup720 to block using an IDSM-2 (v5.1.1g). Relevant configuration Info:Server ---(VL60)---SVI60[10.1.60.1/24]----SVI80[10.1.80.1/24]---IDSM2[Promiscuous, not inline]--(VL80)---PC[10.1.80.25/24]in...
Resolved the issue. Two problems:1. Incorrect VLAN membership - the attcking PC was in VL80, not 81. THe PC has to be in VL81 but still in the 10.1.80.0/24 subnet. 2. Signature misconfiguration - I had the custom sig looking for ICMp type 8 instead o...
IDSM2-PODX# sh conf! ------------------------------! Version 5.1(1)! Current configuration last modified Mon Oct 23 16:35:57 2006! ------------------------------service interfacephysical-interfaces GigabitEthernet0/7description Pod 1 Sensing Interfac...
What does the Event Log say? Are any windows services being blocked by default policies or any of your policies? It does not seem to be a rules issue on the face of it if you can manually re-join the domain unless you have different policies among th...