Cisco Systems IPS4510K9 3-7, To modify the access list, follow these steps:, Log in to the sensor using an account with administrator privileges., Enter network settings mode., Add an entry to the access list. The netmask for a single host is 32., Verify the change you made to the access-list., Remove the entry from the access list., Verify that the host is no longer in the list., Change the value back to the default., Verify the value has been set back to the default.

3-7
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter3 Setting Up the Sensor
Changing Network Settings
To modify the access list, follow these steps:
Step 1 Log in to the sensor using an account with administrator privileges.
Step 2 Enter network settings mode.
sensor# configure terminal
sensor(config)# service host
sensor(config-hos)# network-settings
Step 3 Add an entry to the access list. The netmask for a single host is 32.
sensor(config-hos-net)# access-list 192.0.2.110/32
Step 4 Verify the change you made to the access-list.
sensor(config-hos-net)# show settings
network-settings
-----------------------------------------------
host-ip: 192.168.1.2/24,192.168.1.1 <defaulted>
host-name: sensor <defaulted>
telnet-option: enabled default: disabled
sshv1-fallback: disabled default: disabled
access-list (min: 0, max: 512, current: 2)
-----------------------------------------------
network-address: 10.1.9.0/24
-----------------------------------------------
network-address: 192.0.2.110/32
-----------------------------------------------
-----------------------------------------------
ftp-timeout: 300 seconds <defaulted>
login-banner-text: <defaulted>
-----------------------------------------------
Step 5 Remove the entry from the access list.
sensor(config-hos-net)# no access-list 192.0.2.110/32
Step 6 Verify that the host is no longer in the list.
sensor(config-hos-net)# show settings
network-settings
-----------------------------------------------
host-ip: 192.168.1.2/24,192.168.1.1 <defaulted>
host-name: sensor <defaulted>
telnet-option: enabled default: disabled
sshv1-fallback: disabled default: disabled
access-list (min: 0, max: 512, current: 1)
-----------------------------------------------
network-address: 10.1.9.0/24
-----------------------------------------------
-----------------------------------------------
ftp-timeout: 300 seconds <defaulted>
login-banner-text: <defaulted>
-----------------------------------------------
sensor(config-hos-net)#
Step 7 Change the value back to the default.
sensor(config-hos-net)# default access-list
Step 8 Verify the value has been set back to the default.
sensor(config-hos-net)# show settings
network-settings