[ LiB ] |
Basic sensor initialization involves a few steps. These steps include the initial setup command to configure the interfaces, hostname, IP address, and default gateways. After accomplishing these tasks , you are ready to create user accounts for the sensor. These steps are discussed in detail in the following subsections of this chapter.
Configuring basic sensor settings with the setup command is a simple process. The command issues a series of prompts that take you through the process of configuring the sensor. Here is a list of those prompts:
Hostname
IP address
Netmask
Default gateway
Telnet server
Web server port
Listing 6.3 shows the dialog the setup command uses while you enter the basic configuration settings. The text in bold indicates points where the sensor stops and requests a setting. As you can see, we have entered all the settings needed to complete the setup and save the configuration. Follow the listing slowly and perhaps even execute the command on your sensor to learn the flow of this sequence and to practice entering the settings.
sensor# setup --- System Configuration Dialog --- At any point you may enter a question mark '?' for help. User ctrl-c to abort configuration dialog at any prompt. Default settings are in square brackets '[]'. Current Configuration: networkParams ipAddress 10.1.9.201 netmask 255.255.255.0 defaultGateway 10.1.9.1 hostname sensor telnetOption enabled accessList ipAddress 10.0.0.0 netmask 255.0.0.0 exit timeParams summerTimeParams active-selection none exit exit service webServer general ports 443 exit exit Current time: Mon Dec 1 12:03:46 2003 Setup Configuration last modified: Mon Dec 1 12:01:11 2003 Continue with configuration dialog?[yes]: yes Enter host name[sensor]: sensor1 Enter IP address[10.1.9.201]: 10.1.9.201 Enter netmask[255.255.255.0]: 255.255.255.0 Enter default gateway[10.1.9.1]: 10.1.9.1 Enter telnet-server status[enabled]: enabled Enter web-server port[443]: 443 Modify current access list?[no]: no Modify system clock settings?[no]: no The following configuration was entered. networkParams ipAddress 10.1.9.201 defaultGateway 10.1.9.1 hostname sensor1 telnetOption enabled accessList ipAddress 10.0.0.0 netmask 255.0.0.0 exit timeParams summerTimeParams active-selection none exit exit service webServer general ports 443 exit exit [0] Go to the command prompt without saving this config. [1] Return back to the setup without saving this config. [2] Save this configuration and exit setup. Enter your selection[2]: 2 Configuration Saved.
Notice that the setup command first outputs the current configuration before you start entering the first value; this point occurs at the code line Continue with configuration dialog?[yes]: yes .
The IDS 4.0 supports several types of user accounts as explained in Chapter 5, "Cisco IDS Architecture and Communications Protocols." Once you finish the setup command, you are ready to create user accounts. For example, to create an administrator account, just use the username command at the sensor(config)# prompt.
In Listing 6.4, a user called danny is created as an administrator on the sensor. This code example also uses the show users all command to display all the accounts currently configured. Once you finish these steps, your sensor is ready for action.
sensor# config terminal sensor(config)# username danny password 13579@$^*) privilege administrator sensor(config)# exit sensor# show user all CLI ID User Privilege * 1292 cisco administrator danny administrator
[ LiB ] |