Cisco Systems IPS4510K9 Configuring Inline Bypass Mode

4-33
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter4 Configuring Interfaces
Configuring Inline Bypass Mode
Step 15 Delete VLAN groups:
a. Delete one VLAN group.
sensor(config-int-phy-vla-sub)# exit
sensor(config-int-phy-vla)# no subinterface 1
If this VLAN group is the last one on the sensor, you receive an error message.
Error: This "subinterface-type" contains less than the required number of
"subinterface" entries. Please add entry(s) to reach the minimum required entries or
select a different "subinterface-type".
Go to Step b to remove the last VLAN group.
b. Delete all VLAN groups. You must also delete the VLAN group from the virtual sensor to which it
is assigned.
sensor(config-int-phy-vla-sub)# exit
sensor(config-int-phy-vla)# exit
sensor(config-int-phy)# subinterface-type none
Step 16 Exit interface submode.
sensor(config-int-phy-vla-sub)# exit
sensor(config-int-phy-vla)# exit
sensor(config-int-phy)# exit
sensor(config-int)# exit
Apply Changes:?[yes]:
Step 17 Press Enter to apply the changes or enter no to discard them.
For More Information
For the procedure for assigning inline interface pairs to a virtual sensor, or deleting the inline interface
pair from the virtual sensor to which it is assigned, see Adding, Editing, and Deleting Virtual Sensors,
page 5-4.
Configuring Inline Bypass Mode
This section describes inline bypass mode for sensors configured as inline interface and inline VLAN
pairs, and contains the following topics:
• Understanding Inline Bypass Mode, page 4-33
• Configuring Inline Bypass Mode, page 4-34
Understanding Inline Bypass Mode
Note The ASA 5500-X IPS SSP and the ASA 5585-X IPS SSP do not support bypass mode. The adaptive
security appliance will either fail open, fail close, or fail over depending on the configuration of the
adaptive security appliance and the type of activity being done on the IPS.