Cisco Systems IPS4510K9 manual Configuring Inline Bypass Mode, Understanding Inline Bypass Mode

Chapter 4 Configuring Interfaces

Configuring Inline Bypass Mode

Step 15 Delete VLAN groups:

a.Delete one VLAN group.

sensor(config-int-phy-vla-sub)# exit sensor(config-int-phy-vla)# no subinterface 1

If this VLAN group is the last one on the sensor, you receive an error message.

Error: This "subinterface-type" contains less than the required number of "subinterface" entries. Please add entry(s) to reach the minimum required entries or select a different "subinterface-type".

Go to Step b to remove the last VLAN group.

b.Delete all VLAN groups. You must also delete the VLAN group from the virtual sensor to which it is assigned.

sensor(config-int-phy-vla-sub)# exit sensor(config-int-phy-vla)# exit sensor(config-int-phy)# subinterface-type none

Step 16 Exit interface submode.

sensor(config-int-phy-vla-sub)# exit sensor(config-int-phy-vla)# exit sensor(config-int-phy)# exit sensor(config-int)# exit

Apply Changes:?[yes]:

Step 17 Press Enter to apply the changes or enter no to discard them.

For More Information

For the procedure for assigning inline interface pairs to a virtual sensor, or deleting the inline interface pair from the virtual sensor to which it is assigned, see Adding, Editing, and Deleting Virtual Sensors, page 5-4.

Configuring Inline Bypass Mode

This section describes inline bypass mode for sensors configured as inline interface and inline VLAN pairs, and contains the following topics:

•Understanding Inline Bypass Mode, page 4-33

•Configuring Inline Bypass Mode, page 4-34

Understanding Inline Bypass Mode

Note The ASA 5500-X IPS SSP and the ASA 5585-X IPS SSP do not support bypass mode. The adaptive security appliance will either fail open, fail close, or fail over depending on the configuration of the adaptive security appliance and the type of activity being done on the IPS.

	Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01		4-33