Interface pair configuration documentation?

I want to change up the current config of my 4215 to use two ports for a IPS inline pair pass thru setup. If you have come across the documentation on this I would appreciate if could you link the relevant documentation to your reply. I currently have 5 interfaces and will use 2 of the Fa interfaces to handle the traffic leaving 2 Fa interfaces and 1 Gb interface for monitoring.
I want to pass my remote VPN users traffic through this inline pair.
Thanks in advance and I will continue to search for the documents.

Version 6:
http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a00807517bb.html#wp1046883
Version 5:
http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a00804cf4c2.html#wp1033269

Similar Messages

IPS Interface Pairs vs. Inline VLAN Pairs

       I've got a Cisco IPS 4240 that needs to be configured inline. Right now I've got an ASA 5525-X with two interfaces (inside and DMZ) plugged into our Catalyst 6500 Switch that need to be monitored by the IPS. I also plugged two interfaces from the IPS into the same Catalyst switch hoping that I could use the inline VLAN pairs to monitor that traffic. I've got several VLANs in our DMZ and LAN that need to be monitored. The problem is that I don't understand how the inline VLAN pairs are supposed to work (Cisco's IPS documentation is almost useless), I've been fighting with it for some time with no success.
     I'm now thinking that it might be a better idea to plug the two interfaces from the ASA directly into the IPS and then create Interface Pairs from the IPS to the switch. My concern with doing this is that I am turning the IPS into a single point of failure, if it goes down everything goes down with it.   Also, will the Interface Pairs work with a 802.1q trunk? Would I then need to create VLAN groups for the trunk? Would using inline VLAN pairs also create a single point of failure?
     Basically, I'd like to know the pros and cons to the Interface Pairs vs. the Inline VLAN pairs. Interface Pairs seems like the easiest and most comprehensive way to go, but if I can avoid the single point of failure with the inline VLAN paris I would like to go that route.

Hello Paul,
I want to go with Inline vlan pair,i don't want to go with interface pairing,as this is request by customer,how i can do it,as i m having a IPS-4240 with 4 gig ports,
I have a doubt that if we create a vlan pair then in each pair 1 be a real vlan and the other should be dummy vlan ???? ( for example vlan 2 and vlan 3 in which vlan 3 is the dummy vlan). Please suggest
If i have a 10 vlan than i will configure the 10 pair of vlan on gig0/0 with real and dummy vlan, but what vlan pair i shld configure on gig0/1 i.e (exit interface to ASA DMZ interface.)
Thanks
Message was edited by: adamgibs7

IPS interface pairs

hi. i have one switch and configurated 2 vlans. switch connect to ips. ips configurated inline interface pairs mode.
i want to ask. in this application the vlan must be same subnet?
if i have two switch then the vlan must be diffrent sunbet?

I want to know that.
i deploy my ips sensor at interface pair mode.
i have one switch and i configutared 2 vlans (vlan 10 20) at this siwtch.ips connected switch two phisical interface at interface pair mode. do i configurate the vlans different subnet in this application?

Switch config for Inline Interface Pair

Hello all
Am having a doubt here, so need your help.
I want to configure an IPS in inline interface mode. What I have is
internet rtr---->Switch----->outside intrface of ASA
Here, I want to monitor/inspect the traffic coming from the internet.
I am planning to connect the inline interfaces to the same switch.
What am not sure is what will be the switchport configuration for the inline interface pair?
Also, How the switch will forward traffic to the IPS and then IPS to the ASA?
Thanks in advance
..Abhi

What are you using for an IPS, an appliance? an IOS IPS in the Internet router or the ASA?
If you want to feed the output of your IPS into the same switch as the input, you'll need to create two separate VLANS, one for the switch interfaces that are outside your IPS and the other for the interfaces that are inside your IPS.
interface Gi0/1
switchport access vlan 10
switchport mode access
switchport nonegotiate
interface Gi0/5
switchport access vlan 20
switchport mode access
switchport nonegotiate
interface vlan 10
interface vlan 20
- Bob

INS-40925 - One or more nodes have interfaces not configured with a subnet that is common across all cluster nodes.

Hi All,
I am facing the below error while installing Oracle RAC in Silent Mode.
SEVERE: There are no common subnets represented by network interfaces across all cluster nodes.
SEVERE: [FATAL] [INS-40925] One or more nodes have interfaces not configured with a subnet that is common across all cluster nodes.
   CAUSE: Not all nodes have network interfaces that are configured on subnets that are common to all nodes in the cluster.
   ACTION: Ensure all cluster nodes have a public interface defined with the same subnet accessible by all nodes in the cluster.
My /etc/hosts is given below.
127.0.0.1        localhost    localhost.localdomain
#Public
192.168.1.101      rac1        rac1.localdomain
192.168.1.102    rac2        rac2.localdomain
#Private
192.168.2.101    rac1-priv    rac1-priv.localdomain
192.168.2.102    rac2-priv    rac2-priv.localdomain
#Virtual
192.168.1.103      rac1-vip    rac1-vip.localdomain
192.168.1.104    rac2-vip    rac2-vip.localdomain
#SCAN
192.168.1.105    rac-scan    rac-scan.localdomain
Could you please help me to get rid of the error INS-40925....Any Idea...???

Hi Ramesh,
Please find the result of ifconfig -a from both nodes RAC1 & RAC2.
ifconfig -a in RAC1
[oracle@rac1 Desktop]$ ifconfig -a
eth0      Link encap:Ethernet HWaddr 08:00:27:17:7A:D5
          inet addr:192.168.1.101 Bcast:192.168.1.255 Mask:255.255.255.0
          inet6 addr: fe80::a00:27ff:fe17:7ad5/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:102 errors:0 dropped:0 overruns:0 frame:0
          TX packets:48 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:25472 (24.8 KiB) TX bytes:3322 (3.2 KiB)
          Interrupt:19 Base address:0xd020
eth1      Link encap:Ethernet HWaddr 08:00:27:C0:AC:DB
          inet addr:192.168.2.101 Bcast:192.168.2.255 Mask:255.255.255.0
          inet6 addr: fe80::a00:27ff:fec0:acdb/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:4 errors:0 dropped:0 overruns:0 frame:0
          TX packets:12 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:240 (240.0 b) TX bytes:816 (816.0 b)
          Interrupt:16 Base address:0xd240
lo        Link encap:Local Loopback
          inet addr:127.0.0.1 Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING MTU:16436 Metric:1
          RX packets:56 errors:0 dropped:0 overruns:0 frame:0
          TX packets:56 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:6394 (6.2 KiB) TX bytes:6394 (6.2 KiB)
virbr0    Link encap:Ethernet HWaddr 52:54:00:CC:BD:FB
          inet addr:192.168.122.1 Bcast:192.168.122.255 Mask:255.255.255.0
          UP BROADCAST MULTICAST MTU:1500 Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
virbr0-nic Link encap:Ethernet HWaddr 52:54:00:CC:BD:FB
          BROADCAST MULTICAST MTU:1500 Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:500
          RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
ifconfig -a in RAC2
[oracle@rac2 Desktop]$ ifconfig -a
eth0      Link encap:Ethernet HWaddr 08:00:27:C9:38:82
          inet addr:192.168.1.102 Bcast:192.168.1.255 Mask:255.255.255.0
          inet6 addr: fe80::a00:27ff:fec9:3882/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:122 errors:0 dropped:0 overruns:0 frame:0
          TX packets:59 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:32617 (31.8 KiB) TX bytes:5157 (5.0 KiB)
          Interrupt:19 Base address:0xd020
eth1      Link encap:Ethernet HWaddr 08:00:27:90:B5:A0
          inet addr:192.168.2.102 Bcast:192.168.2.255 Mask:255.255.255.0
          inet6 addr: fe80::a00:27ff:fe90:b5a0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:4 errors:0 dropped:0 overruns:0 frame:0
          TX packets:11 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:240 (240.0 b) TX bytes:746 (746.0 b)
          Interrupt:16 Base address:0xd240
lo        Link encap:Local Loopback
          inet addr:127.0.0.1 Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING MTU:16436 Metric:1
          RX packets:56 errors:0 dropped:0 overruns:0 frame:0
          TX packets:56 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:6390 (6.2 KiB) TX bytes:6390 (6.2 KiB)
virbr0    Link encap:Ethernet HWaddr 52:54:00:CC:BD:FB
          inet addr:192.168.122.1 Bcast:192.168.122.255 Mask:255.255.255.0
          UP BROADCAST MULTICAST MTU:1500 Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
virbr0-nic Link encap:Ethernet HWaddr 52:54:00:CC:BD:FB
          BROADCAST MULTICAST MTU:1500 Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:500
          RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)

DMS Configuration Documentation

Hi,
Can anyone pls send me the DMS configuration documentation ?
If I want to use Fileserver ( external data server but not SAP content server) for storage of documents then how do I configure this ?
Do anyone have any idea ?
One more question: While assigning original files to the documents we have to assign Document storage area. How and where this is configured ?
thanks and warm regards
Purnendu

Hi Maiti,
Did you get any idea?
I have not worked on the your scenaio, but trying to find the solution.
You define settings for the <b>Internet Application Component</b> Document
Search on the Web here.
For more information, see the following documents:
o   Document Management: Document Search in the World Wide Web
    For information about the features of the document search.
o   SAP Library
    For information about the installation of components of SAP
    Knowledge Provider:
    -   SAP Content Server
    -   Index Management Service
    -   SAP Gateway
    In the SAP Library, choose:
    Cross-Application Components -> Document Management -> Original
    Application File of a Document Info Record -> Storing Original
    Application Files -> Storage of Data in Storage Systems Using the
    Knowledge Provider and Installation Notes
Internet Transaction Server / SAP@Web Studio (BC-FES-ITS)
Complete business solution for linking mySAP.com components to the
Internet.
Regards
Rehman
Internet Application Components (IACs) enable users to access business
information in mySAP.com components by starting SAP transactions,
function modules, or reports from a Web browser.
You can make IACs available to users outside your company using the
Internet or users within your company through the intranet.
You can modify and use the IACs supplied by SAP or use them as templates
for developing your own.

SCM - EWM Configuration Documentation

I am trying to find any configuration documentation for EWM. Hopefully with step by step instructions with transaction codes, etc. Does anyone know if this exists?
Thanks

Hi Mark,
You can use the following links which will give you the basic guidelines of mapping the relevant configurations.
http://help.sap.com/saphelp_scm70/helpdata/EN/f7/5bfd401800f123e10000000a155106/frameset.htm
http://help.sap.com/saphelp_scm70/helpdata/EN/5f/c69040bca2ef4ae10000000a1550b0/frameset.htm
Hope this helps you. Please confirm
Regards
R. Senthil Mareeswaran.

MSS Configuration Documentation needed.

Hello Gurus,
Can somebody please send me the configuration documentation on MSS. We are currently implementing Business package for MSS 60.1 on ECC 5.0.
Thanks a ton,
Sasi.

hi Bharath,
could u plz fwd me the MSS configuration document. thankign you in advance for fwdind. plz fwd it to [email protected]
regards
shiva

CFM configuration documentation

MODERATOR: All points have been UNASSIGNED and the thread LOCKED. Please do not share email addresses or links to SAP copyrighted information on these forums. If you have some information, please consider posting it to the [Wiki|https://wiki.sdn.sap.com/wiki/display/ERPFI/Home] rather than sharing via email. Than you for your assistance.
hi
can any body send me the CFM(Corporate Finance Management) configuration documentation with screenshots.
my personal mail id - [email protected]
duly rewarded.
sri
Edited by: srilatha v on May 23, 2008 9:29 AM

Hi:
For In-House Cash,Refer to
http://help.sap.com/bp_bblibrary/500/BBlibrary_start.htm
W25: FSCM In-House Cash
For Liquidity Planner,Transaction Manager,Portfolio Analyzer,Market Risk Analyzer,Credit Risk Analyzer
Refer to
http://help.sap.com/saphelp_banking463/helpdata/en/08/A9E139709BA63BE10000000A114084/frameset.htm
Please let me know if you need more information.
Assign points if useful.
Regards
Sridhar M

Controller for View, Window, Interface, and Configuration Cannot Be Created

Hi All,
In our Web Dynpro ABAP applicaton we have a window and when we edit the conent of window and try to press "Cancel" button we are getting below error.
Controller for View, Window, Interface, and Configuration Cannot Be Created
The termination type was: RABAX_STATE
The ABAP call stack was:
Method: GET_CONTROLLER of program CL_WDR_COMPONENT==============CP
Method: GET_ACTION_FROM_EVENT of program CL_WDR_WINDOW_PHASE_MODEL=====CP
Method: DO_HANDLE_ACTION_EVENT of program CL_WDR_WINDOW_PHASE_MODEL=====CP
Method: PROCESS_REQUEST of program CL_WDR_WINDOW_PHASE_MODEL=====CP
Method: PROCESS_REQUEST of program CL_WDR_WINDOW=================CP
Method: EXECUTE of program CL_WDR_MAIN_TASK==============CP
Method: IF_WDR_RUNTIME~EXECUTE of program CL_WDR_MAIN_TASK==============CP
Method: HANDLE_REQUEST of program CL_WDR_CLIENT_ABSTRACT_HTTP===CP
Method: IF_HTTP_EXTENSION~HANDLE_REQUEST of program CL_WDR_MAIN_TASK==============CP
Method: EXECUTE_REQUEST_FROM_MEMORY of program CL_HTTP_SERVER================
Do any one have idea regarding this error.
Regards
CB

Hi,
Sounds bit strange to me, if you edit your window and do not want to save your changes then i would not expect this error. assuming that the component does not have activation problem.
Just for making sure.
I assume that your problem is on design time and not runtime.
If it is a design time and problem still exists, try to delete this window, save ,activate and then recreate this window,embed your view(s).
If it is runtime problem then i would suggest you to do debugging and find out where it is getting this error.

Is there a Web-Interface to configure Time Capsule?

Every router has a web interface to configure it from any locally connected computer independent from what computer or OS you are using (Mac, Windows PC, Linux, etc...). So far, as I figured out, Time Capsule can only be configured via the AirPort Utility on Mac OS. As I am using a heterogenous network with Macs, Windows and even Linux PCs this is very disappointing to me...

Sorry but none of Apple's routers (including the Time Capsule) have a web interface for configuration.
Time Capsule can only be configured via the AirPort Utility on Mac OS.
It can also be configured using AirPort Utility on a PC running Windows XP (SP2) or Windows Vista.
www.apple.com/timecapsule/specs.html

Interface pairs subneting

i have one IPS 4255 sensor and one catalyst switch. i deploy ips interface pairs and connecting two vlan 33 22. i want to learn that.
the vlans (33 and 22) must be same subnet????? or different subnet at interface pairs mode???
because i do same subnet at interface pairs , it works and i do different subnet at interface pairs it is not work.
please write your comment.

The in-line interface pairs of the Cisco IPS sensor are transparent to traffic. You can think of the sensor as a "bump in the wire". Since there is no layer 3 routing intelligence in the sensor, there is nothing that would pass traffic between two different subnets on a pair of in-line interfaces. Both interfaces need to be addressed within the same subnet.
- Bob

ADI(Active Desktop Interface) Installation & Configuration.

Hi,
Hi All,
How can I ADI(Active Desktop Interface) Installation & Configuration. I have Server Unix AIX 5.1.
Please help me.
Thanks in Advance

Sorry for by written wrong spelling of
Active Desktop Integrator

Location of updated wi-fi configuration documentation?

Anyone know where to get updated wi-fi configuration documentation? Most of what's available is out of date (ie. 2/9/11)...

It is pretty clear that after 3+ years have passed with no updates, the chances that Apple might provide updated support documents for the AirPort routers are very small.
Your best bet might be to take a look at something like......
Take Control of Your Apple Wi-Fi Network (1.0) SAMPLE
I have no interest in Take Control books other than that as a customer.

PI 2.0 - Interface bulk configuration - Interface Roles

Hi,
I did some research on how to use CLI configuration template do bulk configure Ports depending on their Port description. I found the Interface Role definition located in "Design --> Shared Policy Objects" which seemed perfect to be used inside a configuration template. It is also written in the User Guide that Interface Roles can be used in configuration templates. The problem for me now is that i did not find out how to use Interface Roles inside custom CLI configuration templates!? The Interface Roles can be choosen inside some pre-defined templeats like the AVC template but apart from that i am not aware how to include Interface Roles in any custom configuration template!?
Does anyone have some experience with this or maybe a link to a more detailed documentation for creating configuration templates? All i found out about CLI templates so far is how to define variables!?
Thanks in advance!

Hey Florian,
well let's see if port groups is the solution.
All the other things are just workarounds and we are confused how to treat LAN switches.
Our customers used templates for access switches to tell the device what is necessary to monitor. If prime does it from now, we should have the information what is necessary to configure on Switches.
I'll let you know, if we have the right answer.
br,
chris

Interface pair configuration documentation?

Similar Messages

Maybe you are looking for