IPS Monitoring Information Dialog Box | Cisco Systems OL-16066-01

Appendix K Router Platform User Interface Reference

		AIM-IPS Interface Settings Page
Table K-14	AIM-IPS Interface Settings Page (Continued)

Interface Name		The name of the interface role that the AIM-IPS uses.

Monitoring Mode		Inline or Promiscuous: Inline mode puts the AIM-IPS directly into the traffic
		flow, allowing it to stop attacks by dropping malicious traffic before it
		reaches the intended target. In promiscuous mode, packets do not flow
		through the sensor; the sensor analyzes a copy of the monitored traffic rather
		than the actual forwarded packet.

Access List		Optional. Used to configure a standard monitoring access list on the router
		and apply that access list to filter traffic for inspection. A matched ACL
		causes traffic not to be inspected for that ACL. More information on the
		options for the access-list command is available in the Cisco IOS Command
		Reference.

Add button		Opens the IPS Monitoring Information Dialog Box, page K-35. From here
		you can define an IPS monitoring interface.

Edit button		Opens the IPS Monitoring Information Dialog Box, page K-35. From here
		you can edit an IPS monitoring interface.

Delete button		Deletes the selected IPS monitoring interfaces from the table.

Save button		Saves your changes to the Security Manager server but keeps them private.
		Note To publish your changes, click the Submit icon on the toolbar.

Tip To choose which columns to display in the table, right-click a column header, then select Show Columns. For more information about table display options, see Table Columns and Column Heading Features, page 3-26.

IPS Monitoring Information Dialog Box

Use the IPS Monitoring Information dialog box to add or edit the properties of AIM-IPS interfaces.

Navigation Path

Go to the AIM-IPS Interface Settings Page, page K-34, then click the Add or Edit button beneath the AIM-IPS Service Module Monitoring Settings table.

		User Guide for Cisco Security Manager 3.2
		User Guide for Cisco Security Manager 3.2
	OL-16066-01			K-35
	OL-16066-01			K-35

Image 35

Cisco Systems OL-16066-01 appendix IPS Monitoring Information Dialog Box

Contents

Router Platform User Interface Reference Dhcp Policy Page, page K-167 NTP Policy Page, page K-174 CPU Policy Page, page K-107 Chapter K, Router Platform User Interface Reference NAT Page-Interface Specification TabNAT Policy For more information, see NAT on Cisco IOS Routers, Related Topics Edit Interfaces Dialog Box-NAT Inside Interfaces Field Reference Edit Interfaces Dialog Box-NAT Outside Interfaces NAT Page-Static Rules Tab Information, see Filtering Tables, NAT Static Rule Dialog Box Disabling the Payload Option for Overlapping Networks, Basic Interface Settings on Cisco IOS Routers,Defining Static NAT Rules, Disabling the Alias Option for Attached Subnets, Table K-5 NAT Static Rule Dialog Box Table K-5 NAT Static Rule Dialog Box Appendix K Router Platform User Interface Reference For more information, see Defining Dynamic NAT Rules, NAT Page-Interface Specification Tab, page K-3NAT Page-Dynamic Rules Tab NAT Dynamic Rule Dialog Box F-593 Object Selectors, page F-593 NAT Page-Timeouts Tab Specifying NAT Timeouts, Router Interfaces Create Router Interface Dialog Box Table Columns and Column Heading Features, Enabled Type Name Parent BRI, PRI Isdn Discontiguous Network Masks, Table K-10 Create Router Interface Dialog Box MTU Vlan ID Dlci Interface Auto Name Generator Dialog Box Advanced Interface Settings CDP Available Interface Types, Advanced Interface Settings Dialog Box You can create an interface role object For more information, see Understanding Helper Addresses, Eguide09186a00804247fc.htmlSelectors, page F-593 Cisco Discovery Protocol settings Table K-13 Advanced Interface Settings Dialog Box 00800a3ded.shtml Fragreassmps6441TSDProductsConfigurationGuideChapter.htmlVFR ACL AIM-IPS Interface Settings IPS Monitoring Information Dialog Box Dialer Policy Configuring Dial Backup, SPID2 Dialer Profile Dialog BoxSPID1 Table K-17 Dialer Profile Dialog Box Dialer Physical Interface Dialog Box Isdn BRI Adsl Policy Adsl on Cisco IOS Routers, Defining Adsl Settings, PVC Policy Page, page K-54 Adsl Settings Dialog Box Supported by each card type may cause deployment to fail Table K-20 Adsl Settings Dialog Box Shdsl Policy Edit the selected DSL controller definition Shdsl on Cisco IOS Routers, Dialog Box, page K-53 Shdsl Controller Dialog BoxDefining Shdsl Controllers, User Guide for Cisco Security Manager CPE Table K-22 Shdsl Dialog Box Controller Auto Name Generator Dialog Box PVC Policy OAM-PVC PVC IDPVC PVC OAM Defining ATM PVCs, PVC Dialog Box Table K-25 PVC Dialog Box Inverse ARP. See PVC Dialog Box-Protocol Tab, page K-67 PVC Dialog Box-Settings Tab, page K-59PVC. See PVC Dialog Box-QoS Tab, page K-63 PVC Dialog Box-Settings Tab Ilmi VPIVCI PVC Resources are freed for other dial-in users PPP PVC Dialog Box-QoS TabDialog Box-Protocol Tab, page K-67 Understanding Policing and Shaping Parameters, Quality of Service Policy Page, page K-199 CBR Service Classes,ABR VBR-RT UBRUBR+ VBR-NRT PVC Dialog Box-Protocol Tab PVC Dialog Box, page K-56 Defining ATM PVCs, Define Mapping Dialog Box Type for the PVC. See PVC Dialog Box-Settings Tab, page K-59 PVC Advanced Settings Dialog Box Go to the PVC Dialog Box, page K-56, then click Advanced PVC Advanced Settings Dialog Box-OAM TabAdvanced Settings Dialog Box-OAM Tab, page K-70 Advanced Settings Dialog Box-OAM-PVC Tab, page K-73 PVC Dialog Box, page K-56 Table K-31 PVC Advanced Settings Dialog Box-OAM Tab OAM-PVC tab PVC Advanced Settings Dialog Box-OAM-PVC Tab Table K-32 PVC Advanced Settings Dialog Box-OAM-PVC Tab Table K-32 PVC Advanced Settings Dialog Box-OAM-PVC Tab PPP/MLP Policy Table K-33 PPP/MLP Defining PPP Connections, PPP Dialog Box Connection. See PPP Dialog Box-PPP Tab, page K-80 PPP Dialog Box-MLP Tab, page K-84 PPP Dialog Box-PPP TabTab, page K-84 Table K-35 PPP Dialog Box-PPP Tab It for other PPP connections on this device Chap Authentication settings MLP PPP Dialog Box-MLP TabPPP Dialog Box-PPP Tab, page K-80 Advance None-Negotiation is conducted without using an endpoint AAA Policy Defining AAA Services, AAA Page-Authentication Tab AAA Server Group Dialog Box, page F-12 Predefined AAA Authentication Server Groups,Understanding Method Lists, AAA Page-Authorization Tab Information, see Filtering Tables, Command Authorization Dialog Box AAA Page-Accounting Tab Table K-41 AAA Page-Accounting Tab See description Table N-91 on page N-131 Command Accounting Dialog Box Server groups configured with TACACS+ Accounts and Credential s Policy Table K-43 Accounts and Credentials 100 User Account Dialog Box MD5 Understanding FlexConfig Objects,Defining Accounts and Credential Policies, User Accounts and Device Credentials on Cisco IOS Routers, 102 Bridging PolicyBridging on Cisco IOS Routers, 103 Bridge Group Dialog Box 104 Clock Policy 105 106 107 CPU Policy 108 109 110 Http Policy 111 Http Page-Setup TabHttp and Https on Cisco IOS Routers, 112 Http Page-AAA TabHttps 113 Http Page-Setup Tab, page K-111 114 115 116 Command Authorization Override Dialog BoxHttp Policy Page, page K-110 AAA Policy Page, page K-87 117 Console Policy 118 Console Page-Setup TabVTY Line Dialog Box-Setup Tab, page K-132 119 120 121 Console Page-Authentication Tab 122 Page-Authentication Tab, page K-88 123 Console Page-Authorization Tab 124 125 Console Page-Accounting Tab 126 127 Page-Accounting Tab, page K-93 128 129 VTY Policy 130 131 Line Access on Cisco IOS Routers,Dialog Box-Setup Tab, page K-132 VTY Line Dialog Box 132 VTY Line Dialog Box-Setup TabDefining VTY Line Setup Parameters, Console Page-Setup Tab, page K-118 133 134 Policy. See Http Page-Setup Tab, page K-111 135 136 VTY Line Dialog Box-Authentication Tab 137 VTY Line Dialog Box-Authorization Tab 138 Page-Authorization Tab, page K-90 139 VTY Line Dialog Box-Accounting Tab 140 141 142 143 Command Authorization Dialog Box-Line AccessConsole Policy Page, page K-117 VTY Policy Page, page K-129 144 Level. See Command Accounting Dialog Box, page K-96 145 Command Accounting Dialog Box-Line Access 146 147 Secure Shell Policy 148 Box-Setup Tab, page K-132 149 Snmp PolicyFor more information, see Defining Snmp Agent Properties, 150 Snmp on Cisco IOS Routers, 151 Permission Dialog BoxGenerate. See Snmp Traps Dialog Box, page K-155 152 Trap Receiver Dialog Box, page K-153Snmp Traps Dialog Box, page K-155 Defining Snmp Agent Properties, 153 Trap Receiver Dialog BoxPermission Dialog Box, page K-151 154 155 Snmp Traps Dialog Box 156 For more information, see Understanding IKE, 157 158 DNS Policy 159 IP Host Dialog BoxDNS on Cisco IOS Routers, 160 Hostname PolicyHostnames and Domain Names on Cisco IOS Routers, 161 For more information, see Defining Router Memory Settings,Memory Policy 162 163 Secure Device Provisioning PolicySecure Device Provisioning on Cisco IOS Routers, Click Select to display an Object Selectors, page F-593 Administrative Introducers,Secure Device Provisioning Workflow, Understanding PKI Enrollment Objects, 165 166 167 Dhcp PolicyFor more information, see Defining Dhcp Policies, Dhcp on Cisco IOS Routers, 168 To display an Object Selectors, page F-593Definition, page 9-153and Supported IP Address Formats, 169 170 Dhcp Database Dialog BoxDefining Dhcp Policies, IP Pool Dialog Box, page K-171 171 IP Pool Dialog Box 172 Select to display an Object Selectors, page F-593 173 Ddhhmm 174 NTP PolicyFor more information, see Defining NTP Servers, 175 NTP Server Dialog Box, page K-176 176 NTP Server Dialog Box 177 Policy Page, page K-174 178 K-174 179 802.1x PolicyFor more information, see Defining 802.1x Policies, 180 Or click Add to display an Object Selectors, page F-593Defined here. See PPP Dialog Box, page K-78 181 182 183 Network Admission Control Page-Setup TabNetwork Admission Control Policy 184 Defining NAC Setup Parameters, 185 Configuration Dialog Box, page K-187More information, see Working with Access Rules, 186 Network Admission Control Page-Setup Tab, page K-183Network Admission Control Page-Interfaces Tab Defining NAC Interface Parameters, 187 NAC Interface Configuration Dialog Box 188 Page, page F-31 189 Network Admission Control Page-Identities TabDefining NAC Identity Parameters, 190 NAC Identity Profile Dialog Box NAC Identity Profile Dialog Box, page K-190 NAC Identity Action Dialog BoxNAC Identity Action Dialog Box, page K-191 Actions, see NAC Identity Action Dialog Box, page K-191 K-187 Logging Setup PolicyIntercept ACL. See NAC Interface Configuration Dialog Box Box, page K-190 193 194 Information, see -5 on 195 196 197 Syslog Servers PolicyFor more information, see Defining Syslog Servers, 198 Syslog Server Dialog BoxXML Understanding Network/Host Objects, Quality of Service PolicyDefining Syslog Servers, Logging on Cisco IOS Routers, 200 Defining QoS Policies,Understanding Control Plane Policing, CIR 201 202 203 Quality of Service on Cisco IOS Routers,QoS Policy Dialog Box K-205 204 205 QoS Class Dialog Box 206 Tab, page K-217 Box-Matching Tab, page K-208Box-Queuing and Congestion Avoidance Tab, page K-212 Dialog Box-Policing Tab, page K-214 208 QoS Class Dialog Box-Matching Tab 209 DscpF-593. For more information, see Edit ACLs Dialog Box-QoS Classes, page K-210 210 Edit ACLs Dialog Box-QoS ClassesDefining QoS Class Matching Parameters, 211 QoS Class Dialog Box-Marking Tab 212 QoS Class Dialog Box-Queuing and Congestion Avoidance Tab 213 214 QoS Class Dialog Box-Policing Tab 215 216 217 QoS Class Dialog Box-Shaping Tab 218 219 BGP Routing Policy 220 BGP Page-Setup TabDefining BGP Routes, Supported IP Address Formats, 221 Dialog Box, page K-222 222 Neighbors Dialog Box 223 BGP Page-Setup Tab, page K-220BGP Page-Redistribution Tab Redistributing Routes into BGP, 224 BGP Redistribution Mapping Dialog Box 225 226 Eigrp Page-Setup TabEigrp Routing Policy 227 Eigrp Setup Dialog Box 228 Defining Eigrp Routes, 229 Eigrp Page-Setup Tab, page K-226Eigrp Page-Interfaces Tab Edit Interfaces Dialog Box-EIGRP Passive Interfaces 230 Defining Eigrp Interface Properties, 231 Systems, see Eigrp Setup Dialog Box, page K-227Eigrp Interface Dialog Box 232 Eigrp Page-Redistribution Tab 233 234 Eigrp Redistribution Mapping Dialog BoxRedistributing Routes into EIGRP, Page-Redistribution Tab, page K-223 235 236 Ospf Interface Policy 237 238 Defining Ospf Interface Settings,Ospf Interface Dialog Box Ospf Routing on Cisco IOS Routers, 239 240 241 242 Objects, 243 Ospf Process Page-Setup TabOspf Process Policy 244 Defining Ospf Process Settings, 245 Ospf Setup Dialog Box 246 Ospf Process Page-Setup Tab, page K-243Edit Interfaces Dialog Box-OSPF Passive Interfaces 247 Defining Ospf Area Settings,Ospf Process Page-Area Tab 248 Ospf Area Dialog Box 249 Ospf Process Page-Redistribution Tab 250 251 Ospf Redistribution Mapping Dialog Box 252 253 254 Ospf Max Prefix Mapping Dialog BoxOspf Redistribution Mapping Dialog Box, page K-251 K-243 255 RIP Page-Setup TabRIP Routing Policy 256 Defining RIP Setup Parameters,An Object Selectors, page F-593 257 RIP Page-Authentication TabEdit Interfaces Dialog Box-RIP Passive Interfaces 258 Defining RIP Interface Authentication Settings,RIP Page-Setup Tab, page K-255 259 RIP Authentication Dialog Box 260 Redistribution tab. See RIP Page-Setup Tab, page K-255RIP Page-Redistribution Tab 261 RIP Redistribution Mapping Dialog BoxRedistributing Routes into RIP, 262 263 Static Routing PolicyStatic Routing on Cisco IOS Routers, 264 Static Routing Dialog Box 265 Defining Static Routes, 266 267 268