Cisco Systems IPS4510K9 manual Configuring the Maximum Number of Blocking Interfaces, 14-17

Chapter 14 Configuring Attack Response Controller for Blocking and Rate Limiting

Disabling Blocking

Step 4 Disable blocking event and error logging.

sensor(config-net-gen)#log-all-block-events-and-errors false

Step 5 Verify that logging is disabled.

sensor(config-net-gen)# show settings general

-----------------------------------------------

log-all-block-events-and-errors: false default: true

enable-nvram-write: false default: false

enable-acl-logging: false default: false

allow-sensor-block: false <defaulted>

block-enable: true <defaulted>

block-max-entries: 250 <defaulted>

max-interfaces: 250 <defaulted>

master-blocking-sensors (min: 0, max: 100, current: 0)

-----------------------------------------------

Step 6 Enable blocking event and error logging.

sensor(config-net-gen)#log-all-block-events-and-errors true

Step 7 Verify that logging is enabled.

sensor(config-net-gen)# show settings general

-----------------------------------------------

log-all-block-events-and-errors: true default: true

enable-nvram-write: false default: false

enable-acl-logging: false default: false

allow-sensor-block: false <defaulted>

block-enable: true <defaulted>

block-max-entries: 250 <defaulted>

max-interfaces: 250 <defaulted>

master-blocking-sensors (min: 0, max: 100, current: 0)

-----------------------------------------------

Step 8 Exit network access mode.

sensor(config-net-gen)# exit sensor(config-net)# exit

Apply Changes:?[yes]:

Step 9 Press Enter to apply the changes or type no to discard them.

Configuring the Maximum Number of Blocking Interfaces

Use the max-interfacescommand to configure the maximum number of interfaces for performing blocks. For example, a PIX Firewall counts as one interface. A router with one interface counts as one, but a router with two interfaces counts as two. At most you can configure 250 blocking interfaces on a router, switch, or firewall. You can configure up to 250 Catalyst 6K switches, 250 routers, and 250 firewalls.

The max-interfacescommand configures the limit of the sum total of all interfaces and devices. In addition to configuring the limit on the sum total of interfaces and devices, there is a fixed limit on the number of blocking interfaces you can configure per device. Use the show settings command in network access mode to view the specific maximum limits per device.

	Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01		14-17