18-23
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter18 Configuring the ASA 5500-X IPS SSP
allocate-ips
Command History
Usage Guidelines You can assign one or more IPS virtua l sensors to each context. Then, when you configure the context
to send traffic to the ASA 5500-X IPS SSP using the ips command, you can specify a sensor that is
assigned to the context; you cannot specify a sensor that you did not assign to the context. If you do not
assign any sensors to a context, then the default sensor configured on the ASA 5500-X IPS SSP is used.
You can assign the same sensor to multiple contexts.
Note
You do not need to be in multiple context mode to use virtual sensors; you can be in single mode and use
different sensors for different traffic flows.
Examples The following example assigns sensor1 and sensor2 to context A, and sensor1 and sensor3 to context B.
Both contexts map the sensor names to “ips1” and “ips2.” In context A, sensor1 is set as the default
sensor, but in context B, no default is set so the default that is configured on the ASA5500-X IPS SSP
is used.
hostname(config-ctx)# context A
hostname(config-ctx)# allocate-interface gigabitethernet0/0.100 int1
hostname(config-ctx)# allocate-interface gigabitethernet0/0.102 int2
hostname(config-ctx)# allocate-interface gigabitethernet0/0.110-gigabitethernet0/0.115
int3-int8
hostname(config-ctx)# allocate-ips sensor1 ips1 default
hostname(config-ctx)# allocate-ips sensor2 ips2
hostname(config-ctx)# config-url ftp://user1:passw0rd@10.1.1.1/configlets/test.cfg
hostname(config-ctx)# member gold
hostname(config-ctx)# context sample
hostname(config-ctx)# allocate-interface gigabitethernet0/1.200 int1
hostname(config-ctx)# allocate-interface gigabitethernet0/1.212 int2
hostname(config-ctx)# allocate-interface gigabitethernet0/1.230-gigabitethernet0/1.235
int3-int8
hostname(config-ctx)# allocate-ips sensor1 ips1
hostname(config-ctx)# allocate-ips sensor3 ips2
hostname(config-ctx)# config-url ftp://user1:passw0rd@10.1.1.1/configlets/sample.cfg
hostname(config-ctx)# member silver
Related Commands
Release Modification
8.0(2) This command was introduced.
Command Description
context Creates a security context in the system configuration and enters context
configuration mode.
ips Diverts traffic to the ASA5500 -X IPS SSP for inspection.
show context Shows a list of contexts (system execution space) or information about the
current context.
show ips Shows the virtual sensors configured on the ASA 5500-X IPS SSP.