Sic 6 Pratical Complete
Sic 6 Pratical Complete
Practical #6
Apply the IPS rule to an interface with the ip ips name direction command in
interface configuration mode.
Apply the rule outbound on the G0/1 interface of R1. After you enable
IPS, some log messages will be sent to the console line indicating that the
IPS engines are being initialized. Note: The direction in means that IPS
inspects only traffic going into the interface. Similarly, out means that
IPS inspects only traffic going out of the interface.
R1(config)# interface g0/1
R1(config-if)# ip ips iosips out
The pings should fail. This is because the IPS rule for event-action of an echo
request was set to “denypacket-inline”.
From PC-A, attempt to ping PC-C.
The ping should be successful. This is because the IPS rule does not cover
Vidyalankar School of Information Technology
echo reply. When PC-A pings
PC-C, PC-C responds with an echo reply.
Successful
Unsuccessful
Vidyalankar School of Information Technology
Syslog