FIRST REVIEW—CISCO CONFIDENTIAL
16-15
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter1 6 Working With Configuration Files
Displaying the Current Submode Configuration
enable-notifications: false <defaulted>
enable-set-get: false <defaulted>
snmp-agent-port: 161 <defaulted>
snmp-agent-protocol: udp <defaulted>
read-only-community: public <defaulted>
read-write-community: private <defaulted>
trap-community-name: public <defaulted>
system-location: Unknown <defaulted>
system-contact: Unknown <defaulted>
sensor(config-not)# exit
sensor(config)# exit
sensor#
Step 14
Display the current configuration for the signature definition submode.
sensor# configure terminal
sensor(config)# service signature-definition sig0
sensor(config-sig)# show settings
variables (min: 0, max: 256, current: 1)
-----------------------------------------------
<protected entry>
variable-name: WEBPORTS
-----------------------------------------------
web-ports: 80-80,3128-3128,8000-8000,8010-8010,8080-8080,8888-8888,2432
6-24326 <defaulted>
-----------------------------------------------
-----------------------------------------------
application-policy
-----------------------------------------------
http-policy
-----------------------------------------------
http-enable: false <defaulted>
max-outstanding-http-requests-per-connection: 10 <defaulted>
aic-web-ports: 80-80,3128-3128,8000-8000,8010-8010,8080-8080,8888-8888,
24326-24326 <defaulted>
-----------------------------------------------
ftp-enable: false <defaulted>
-----------------------------------------------
fragment-reassembly
-----------------------------------------------
ip-reassemble-mode: nt <defaulted>
-----------------------------------------------
stream-reassembly
-----------------------------------------------
--MORE--
Step 15
Display the current configuration for the SSH known hosts submode.
sensor# configure terminal
sensor(config)# service ssh-known-hosts
sensor(config-ssh)# show settings
rsa1-keys (min: 0, max: 500, current: 0)
-----------------------------------------------
-----------------------------------------------
sensor(config-ssh)# exit
sensor(config)# exit
sensor#
Step 16
Display the current configuration for the trusted certificates submode.
sensor# configure terminal
sensor(config)# service trusted-certificate
sensor(config-tru)# show settings
trusted-certificates (min: 0, max: 500, current: 1)
-----------------------------------------------