1.現狀:
VMWare版的IPS5.0,隻有三塊網卡,第一塊網卡為command口,其餘兩個為sensor口,無法測試interface pair與雜合模式是否能同時使用,因為至少需要3個sensor口;兩個sensor口到時可以測試一個接口采用VLAN pair,另外一個接口采用雜合模式。
2.添加一塊sensor網卡的步驟:
A.VMWare中虛拟機添加一塊網卡,與本地一塊loopbak網卡橋接
B.關閉IPS虛拟機,修改vmx檔案:
添加一行:ethernet3.virtualDev = "e1000"
C.再次打開虛拟機,以service帳号登入,并且su - root
root帳号密碼和service的帳号密碼一緻
D.修改/usr/cids/idsRoot/etc/interface.conf檔案:
①slot的pci-device分别為17和20,跨度為4,網卡的總數量
[models/IDS-4215/slots/1]
# lower slot
pci-bus=1
pci-device=17
[models/IDS-4215/slots/2
# upper slot
pci-bus=2
pci-device=20
②網卡的pci-device從17依次到20
[models/IDS-4215/interfaces/1]
# built-in 10/100 TX mgmt interface, Intel 82559ER
# was eth1 (int1) in 4.x
# rightmost connector on front panel
# labeled "Ethernet 1" on panel
name-template=Management0/0
#pci-bus=0
pci-function=0
vendor-id=0x8086
device-id=0x100f
type=ge
mgmt-capable=yes
default-admin-state=enable
on-backplane=yes
[models/IDS-4215/interfaces/2]
# built-in 10/100 TX sensing interface, Intel 82559ER
# was eth0 (int0) in 4.x
# leftmost connector labeled "Ethernet 0"
name-template=GigabitEthernet0/1
pci-device=18
sensing-capable=yes
tcp-reset-capable=yes
default-admin-state=enabled
[models/IDS-4215/interfaces/3]
name-template=GigabitEthernet0/2
pci-device=19
[models/IDS-4215/interfaces/4]
# rightmost interface on optional 1 x 4-FE card:
# on secondary bus of pci-pci bridge on the interface card
# was eth5 (int5) in 4.x
name-template=GigabitEthernet0/3
本文轉自 碧雲天 51CTO部落格,原文連結:http://blog.51cto.com/333234/958338,如需轉載請自行聯系原作者