Cisco IDS 4210 - Intrusion Detection Sys 4210... Manuel utilisateur

CHAPTER

2-1

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1

OL-8677-01

Installing IDS-4210

This chapter describes IDS-4210 and how to install it and its accessories.

Note IDS-4215 replaced IDS-4210, which is no longer sold.

Note If you purchased an IDS-4210 before July 2003, you must upgrade the memory to 512 MB to install

Cisco IPS 5.x. for more information, see Upgrading the Memory, page 2-3.

Note IDS-4210 does not support inline (IPS) mode.

Caution The BIOS on IDS-4210 is specific to IDS-4210 and must only be upgraded under instructions from Cisco

with BIOS files obtained from the Cisco website. Installing a non-Cisco or third-party BIOS on

IDS-4210 voids the warranty. For more information on how to obtain instructions and BIOS files from

the Cisco website, see Obtaining Obtaining Cisco IPS Software, page 11-1.

This chapter contains the following sections:

•Front and Back Panel Features and Indicators, page 2-2

•Upgrading the Memory, page 2-3

•Installing IDS-4210, page 2-5

•Installing the Accessories, page 2-7

2-2

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1

OL-8677-01

Chapter 2 Installing IDS-4210

Front and Back Panel Features and Indicators

Figure 2-1 shows the front panel indicators on IDS-4210.

Figure 2-1 Front Panel Features

Table 2-1 describes the appearance and function of the front panel indicators.

87951

Power indicator

System fault indictor

Hard-disk drive

activity indicator

LAN 1 activity/link

indicator

LAN 2 activity/link

indicator

Table 2-1 Front Panel Indicators

Indicator Color Function

Power Green Lights up when the system is connected to an AC

power source; blinks when the system is in sleep

mode.

System fault Amber Blinks during system startup or when a system fault is

detected.

Hard-disk drive activity Green Blinks when hard-disk drive activity occurs.

LAN1 activity/link Amber Lights up when the LAN1 connector is linked to an

Ethernet port; blinks when activity occurs on this

channel.

LAN2 activity/link Amber Lights up when the LAN2 connector is linked to an

Ethernet port; blinks when activity occurs on this

channel.

2-3

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1

OL-8677-01

Chapter 2 Installing IDS-4210

Upgrading the Memory

Figure 2-2 shows the back panel features on IDS-4210.

Figure 2-2 Back Panel Features

Upgrading the Memory

IDS-4210, IDS-4210-K9, and IDS-4210-NFR must have 512 MB of RAM to support Cisco IPS 5.1. If

you are upgrading an existing IDS-4210, IDS-4210-K9, or IDS-4210-NFR to 5.1, you must insert one

additional 256-MB DIMM (part number IDS-4210-MEM-U) to upgrade the memory to the required 512

MB minimum.

Note Do not install an unsupported DIMM. Doing so nullifies the warranty.

Caution Follow proper safety procedures when performing these steps by reading the safety warnings in

Regulatory Compliance and Safety Information for the Cisco Intrusion Prevention System 4200 Series

Appliance Sensor.

To upgrade the memory, follow these steps:

Step 1 Log in to the CLI.

Step 2 Prepare the appliance to be powered off:

sensor# reset powerdown

Wait for the power down message before continuing with Step 3.

Note You can also power down the sensor from IDM or ASDM.

Step 3 Power off the appliance.

Step 4 Remove the power cord and other cables from the appliance.

Step 5 Place the appliance in an ESD-controlled environment.

For more information, see Working in an ESD Environment, page 1-25.

83723

AC power Mouse

(unused)

Command and Control

interface FastEthernet0/1

COM1

Keyboard Sensing interface

FastEthernet0/0

USB

(unused)

Video

2-4

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1

OL-8677-01

Chapter 2 Installing IDS-4210

Upgrading the Memory

Step 6 Remove the chassis cover by unscrewing the screw on the front of the cover and sliding the cover straight

back.

Step 7 Locate the DIMM sockets and select the empty DIMM socket next to the existing DIMM.

Note The existing DIMM is installed in socket 0. The angled position of the DIMM sockets make

installing an additional DIMM in socket 1 difficult if a DIMM occupies socket 0. Therefore, you

should first remove the existing DIMM from socket 0, place the new DIMM in socket 1, and then

replace the existing DIMM in socket 0.

Step 8 Locate the ejector tabs on either side of the DIMM socket. Press down and out on tabs to open the slot

in the socket.

Step 9 Install the new DIMM, by positioning the DIMM into the socket and pressing it into place.

Note Do not force the DIMM into the socket. Alignment keys on the DIMM ensure that it only fits in

the socket one way. If you need additional leverage, you can gently press down on the DIMM

with your thumbs while pulling up on the ejector tabs.

Step 10 Replace the chassis cover and reconnect the power.

Step 11 Power on the sensor and make sure the new memory total is correct.

Note If the memory total does not reflect the added DIMMs, repeat Steps 1 through 4 to ensure the

DIMMs are seated correctly in the socket.

Bank 3

41167

DIMM

Bank 0

Bank 2

Bank 1

2-5

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1

OL-8677-01

Chapter 2 Installing IDS-4210

Installing IDS-4210

Warning

Only trained and qualified personnel should be allowed to install, replace, or service this equipment.

Statement 1030

Caution Follow proper safety procedures when performing these steps by reading the safety warnings in

Regulatory Compliance and Safety Information for the Cisco Intrusion Prevention System 4200 Series

Appliance Sensor.

Note If you purchased an IDS-4210 before July 2003, you must upgrade the memory to 512 MB to install

Cisco IPS 5.x. For more information, see Upgrading the Memory, page 2-3.

To install IDS-4210 on the network, follow these steps:

Step 1 Position IDS-4210 on the network.

Step 2 Attach the power cord to IDS-4210 and plug it in to a power source (a UPS is recommended).

Note When you first plug an IDS-4210 into a power source, it powers on momentarily and then powers

off leaving the NIC link lights lit. This is normal behavior. Press the power switch to boot the

system into operation.

Step 3 Use the dual serial communication cable (PN 72-1847-01, included in the accessory kit) to attach a

laptop to the COM1 port of IDS-4210 (see Table 2-2 for a list of the terminal settings), or connect a

keyboard and monitor to IDS-4210.

Caution We recommend that you use the dual serial communication cable (PN 72-1847-01, included in the

accessory kit) rather than a keyboard and monitor, because some keyboards and monitors may be

incompatible with IDS-4210.

Ta b l e 2 - 2 Te rm i n a l S e t t i n g s

Terminal Setting

Bits per second 9600

Data bits 8

Parity None

Stop bits 1

Flow control Hardware or RTS/CTS

2-6

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1

OL-8677-01

Chapter 2 Installing IDS-4210

Installing IDS-4210

Note You can use a 180 rollover or straight-through patch cable to connect IDS-4210 to a port on a

terminal server with RJ-45 or hydra cable assembly connections. Use a M.A.S.H adapter (part

number 29-4077-02) to connect the appropriate cable to a port on the terminal server. For the

instructions for setting up a terminal server, see Setting Up a Terminal Server, page 1-14.

Step 4 Attach the network cables.

IDS-4210 has the following interfaces:

•FastEthernet0/0 is the sensing port.

•FastEthernet0/1 is the command and control port.

Caution Management and console ports are privileged administrative ports. Connecting them to an untrusted

network can create security concerns.

Step 5 Upgrade the memory on IDS-4210.

For the procedure, see Upgrading the Memory, page 2-3.

Caution You must upgrade the memory on IDS-4210 to a minimum of 512 MB before you can install the most

recent Cisco IPS software.

Step 6 Power on IDS-4210.

Step 7 Initialize IDS-4210.

For the procedure, see Initializing the Sensor, page 10-2.

Step 8 Upgrade IDS-4210 to the latest Cisco IPS software.

For the procedure, see Obtaining Cisco IPS Software, page 11-1.

You are now ready to configure intrusion detection on the appliance.

83723

AC power Mouse

(unused)

Command and Control

interface FastEthernet0/1

COM1

Keyboard Sensing interface

FastEthernet0/0

USB

(unused)

Video

2-7

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1

OL-8677-01

Chapter 2 Installing IDS-4210

Installing the Accessories

For More Information

•For the procedure for using HTTPS to log in to IDM, refer to Logging In to IDM.

•For the procedures for configuring intrusion prevention on your sensor, refer to the following

documents:

–

Installing and Using Cisco Intrusion Prevention System Device Manager 5.1

–

Configuring the Cisco Intrusion Prevention System Sensor Using the Command Line Interface

5.1

Installing the Accessories

You can install a bezel, and center or front mounting brackets for the IDS-4210.

This section contains the following topics:

•Accessories Package Contents, page 2-7

•Installing and Removing the Bezel, page 2-7

•Installing Center Mount Brackets, page 2-8

•Installing Front Mount Brackets, page 2-10

Accessories Package Contents

The following items are shipped in the accessories package for IDS-4210:

•Cisco IDS-4210 bezel

•Power cable

•Network patch cable

•Computer interconnection cable

•Dual serial communication cable

•Rack mounting brackets

•Documentation and software

–

Cisco IDS recovery/upgrade CD

–

Cisco Documentation CD

–

Documentation Roadmap for Cisco Intrusion Prevention System 5.1

–

Regulatory Compliance and Safety Information for the Cisco Intrusion Prevention System 4200

Series Appliance Sensor

Installing and Removing the Bezel

You can install a Cisco bezel for IDS-4210.

To install and remove the bezel on IDS-4210, follow these steps:

2-8

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1

OL-8677-01

Chapter 2 Installing IDS-4210

Installing the Accessories

Step 1 To insert the bezel on IDS-4210, follow these steps:

a. Align the bottom tabs on the bezel with the slots on IDS-4210.

b. Align the side tabs on the bezel with the slots on IDS-4210.

c. Press the bezel into IDS-4210.

Step 2 To remove the bezel from IDS-4210, press the side tabs and pull.

Installing Center Mount Brackets

You need the following tools and supplies to install the brackets in a two-post, open-frame relay rack:

•#2 Phillips screwdriver

•Masking tape or felt-tip pen to mark the mounting holes to be used

To install the center mount brackets in a two-post, open-frame relay rack, follow these steps:

Step 1 Determine where you want to place IDS-4210.

Step 2 Mark the upper and lower mounting positions on the two posts.

2-9

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1

OL-8677-01

Chapter 2 Installing IDS-4210

Installing the Accessories

Step 3 Locate one of the two brackets and align it over the two threaded holes on the side of IDS-4210 (see

Figure 2-3).

Figure 2-3 Installing Center Mount Brackets

Step 4 Secure the bracket to IDS-4210 chassis using two screws (see Figure 2-3 on page 2-9).

Step 5 Repeat Step 4 to install the remaining bracket on the other side of IDS-4210.

50623

LINK

CONS ETHERNET 0 ETHERNET 1 SCSI LVD ONLY

100Mbps LINK 100Mbps DRIVE 0

DRIVE 0

DRIVE 1

0123

Pan-head

Phillips screws

Pan-head

Phillips screws

(2 per bracket)

2-10

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1

OL-8677-01

Chapter 2 Installing IDS-4210

Installing the Accessories

Step 6 Lift IDS-4210 into position between the two posts with the hole in the mounting bracket aligned one hole

above the mark you made in the two posts (see Figure 2-3 on page 2-9).

Step 7 Secure IDS-4210 to the rack using a screw through the mounting bracket to the front of the left and right

posts (see Figure 2-3 on page 2-9).

Installing Front Mount Brackets

Make sure you have the following supplies (found in the front mount bracket assembly kit) and tools to

install the front mount brackets in a two-post, open-frame relay rack:

•Two chassis support brackets

•Two rack-mounting brackets

•Six screws

•#2 Phillips screwdriver

Note The front mount bracket assembly is not intended for use as a slide rail system. The server must be firmly

attached to the rack, as shown in Figure 2-4.

Figure 2-4 Front Mount Brackets

55150

LINK

CONS ETHERNET 0 ETHERNET 1 SCSI LVD ONLY

100Mbps LINK 100Mbps DRIVE 0

DRIVE 0

DRIVE 1

0123

Pan-head

Phillips screws

Pan-head

Phillips screws

(to rack)

Table des matières

Autres manuels Cisco Matériel réseau

Cisco

Cisco FirePOWER 8000 Series Manuel utilisateur

Cisco

Cisco GS7000 Mode d'emploi

Cisco

Cisco 7246 - uBR Router Manuel utilisateur

Cisco

Cisco Nexus 93600CD-GX Manuel

Cisco

Cisco IAD2430 Series Guide d'installation

Cisco

Cisco VIP-4R/4T Instructions d'utilisation et d'entretien

Cisco

Cisco ISA500 Series Mode d’emploi

Cisco

Cisco ASR 5000 Series Manuel utilisateur

Cisco

Cisco NCS 2006 Manuel

Cisco

Cisco linksys PLTK300 Manuel utilisateur

Cisco

Cisco ATA 191 Manuel utilisateur

Cisco

Cisco CE-507 - Content Engine 507 Manuel utilisateur

Cisco

Cisco Linksys WES610N Manuel utilisateur

Cisco

Cisco CSC-C2FCIT Mode d’emploi

Cisco

Cisco ONS 15327 Manuel

Cisco

Cisco ASA Guide de démarrage rapide

Cisco

Cisco Network Adapter VIP-FE-TX/4E Manuel de l'opérateur

Cisco

Cisco IPS 7.1 Manuel utilisateur

Cisco

Cisco NCS 2002 Mode d’emploi

Cisco

Cisco CRS-1 - Carrier Routing System Router Guide de l'utilisateur

Cisco

Cisco 40-Gigabit and 100-Gigabit CFP Transceiver... Guide de démarrage rapide

Cisco

Cisco Secure Firewall Management Center 1700 Manuel utilisateur

Cisco

Cisco ONS 15310-CL Manuel utilisateur

Cisco

Cisco TelePresence Manuel de service

Manuels Matériel réseau populaires d'autres marques

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manuel utilisateur

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manuel utilisateur

Yudor

Yudor YDS-16 Manuel utilisateur

D-Link

D-Link ShareCenter DNS-320L Manuel utilisateur

Samsung

Samsung ES1642dc Instructions d'utilisation

Honeywell Home

Honeywell Home LTEM-PV Instructions de montage

evertz

evertz 7700 Series Manuel utilisateur

D-Link

D-Link ShareCenter DNS-343 Manuel utilisateur

Asante

Asante AsanteBridge 1012 Manuel utilisateur

FireBrick

FireBrick FB2700 Manuel utilisateur

Audiovox Electronics

Audiovox Electronics ARWH2T Manuel utilisateur

ADC

ADC DSX-1 Manuel

NetComm

NetComm NF2 Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 5620 Manuel utilisateur

Dell EMC

Dell EMC XC6420 Series Manuel utilisateur

Lanner

Lanner NCA-1020A Manuel utilisateur

Allied Telesis

Allied Telesis AT-TN121-A Manuel utilisateur

Arista

Arista CCA-ETM-Q12 Manuel utilisateur