×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

IDS 4210 - Interface duplex configuration

Unanswered Question
Aug 22nd, 2002
User Badges:

I have an IDS 4210 but It is not sending alerts to de CSPM. The comunication is "established" but I no have any alert regarding traffic signatures in the CSPM.

I believe that the problem could be the duplex configuration of the iprb0 interface.

Does anybody know how can I force the iprb0 to 10Mbps and half duplex??

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
gfullage Sun, 09/01/2002 - 22:34
User Badges:
  • Cisco Employee,

If the connection is showing as Established, then the problem is not the duplex setting. We don't recommend changing this, in fact I've never seen this cause a problem.


Try doing an "nrstop;nrstart" on the sensor to restart the services, do you see any Route Up/Down signatures appear? If not, then your CSPM database is probably corrupted, so go to the Troubleshooting Toolkit from the Start menu, and restore the database. Make sure you File - Export your cxonfiguration off first, then File-Import it back in after the restore is done.


If you do see Route UP/Downs but nothing else, then your sensor is probably not seeing any traffic. If you do a Snoop on the sniffing interface (snoop -d iprb0) do you see traffic? Is it all broadcast/multicast or is there unicast traffic? What level of alerts are you sending to CSPM (check under the Filtering tab in CSPM, set it to Medium).


Actions

This Discussion