IPS線上模式實驗2-Interface Pair

1.拓撲圖：

<a target="_blank" href="http://blog.51cto.com/attachment/201205/122638648.jpg"></a>

2.接口配置：

R1(config)#int f0/0

R1(config-if)#ip add 10.1.1.11 255.255.255.0

R1(config-if)#no sh

R2(config)#int f0/0

R2(config-if)#ip add 10.1.1.12 255.255.255.0

R2(config-if)#no sh

R3#vlan database

R3(vlan)#vlan 10

VLAN 10 added:

    Name: VLAN0010

R3(vlan)#exit

APPLY completed.

Exiting....

R3(config)#int f0/0

R3(config-if)#switchport mode access 

R3(config-if)#switchport access vlan 10

R3(config-if)#int f0/15

R3(config-if)#swi mo acc

R3(config-if)#swi acc vlan 10

R4#vlan data 

R4(vlan)#vlan 20

VLAN 20 added:

    Name: VLAN0020

R4(vlan)#exit

R4#

R4#config t

Enter configuration commands, one per line.  End with CNTL/Z.

R4(config)#int f0/0

R4(config-if)#swi mo acc

R4(config-if)#swi acc vlan 20

R4(config-if)#int f0/15

3.IPS配置：

A.确認g0/1和g/2接口都已經enabled

B.建立接口對，将g0/1和g/2接口加入接口對

<a target="_blank" href="http://blog.51cto.com/attachment/201205/122819739.jpg"></a>

C.将接口對關聯到virtual sensor

<a target="_blank" href="http://blog.51cto.com/attachment/201205/122914759.jpg"></a>

4.測試：

A.在R1上連續ping R2

R1#ping 10.1.1.12 repeat 100

Type escape sequence to abort.

Sending 100, 100-byte ICMP Echos to 10.1.1.12, timeout is 2 seconds:

.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Success rate is 99 percent (99/100), round-trip min/avg/max = 12/27/108 ms

B.在IPS上能看到攻擊事件

<a target="_blank" href="http://blog.51cto.com/attachment/201205/122959154.jpg"></a>

本文轉自 碧雲天 51CTO部落格，原文連結：http://blog.51cto.com/333234/880641，如需轉載請自行聯系原作者