Trunk two VLANs to the sensing interface of the IPS.  Hosts in vlan 10 and 20 are in the same subnet, and the IPS bridges.

SW1:
interface FastEthernet0/1
 description R1
 switchport access vlan 20
 switchport mode access
!
interface FastEthernet0/10
 description PC1
 switchport access vlan 10
 switchport mode access
!
interface FastEthernet0/11
 description Trunk_To_IPS
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 10,20
 switchport mode trunk
!
!
IPS:
IPS# conf t
IPS(config)# service interface
IPS(config-int)# physical-interfaces GigabitEthernet0/0
IPS(config-int-phy)# subinterface-type inline-vlan-pair
IPS(config-int-phy-inl)# subinterface 1
IPS(config-int-phy-inl-sub)# vlan1 10
IPS(config-int-phy-inl-sub)# vlan2 1000
IPS(config-int-phy-inl-sub)# exit
IPS(config-int-phy-inl)# exit
IPS(config-int-phy)# admin-state enabled
IPS(config-int-phy)# exit
IPS(config-int)# exit
Apply Changes:?[yes]: yes
!
!!!Make sure to apply it to a sensor or traffic wont flow.
!
IPS(config)# service analysis-engine
IPS(config-ana)# virtual-sensor vs0
IPS(config-ana-vir)# physical-interface GigabitEthernet0/0
subinterface-number 1
IPS(config-ana-vir)# exit
IPS(config-ana)# exit
Apply Changes:?[yes]: yes
IPS(config)#

Gui Version.

Categories: Uncategorized

0 Comments

Leave a Reply

Avatar placeholder

Your email address will not be published. Required fields are marked *