The only issue with shunning in CSIDS 3.0 identified in the release notes is that it does not support the ShunNet command from the management platforms. No other shunning problems have been reported or are outstanding. What specifically is the problem you are experiencing?
well i have a 4210 v2.5(1)S3 and CSPM v2.3 (which just got upgraded to 2.3.1). I am controlling a 7206 routers FastEthernet0/0 interface with the sensor. What happens sometimes is when i modify a signature from CSPM, say from just IPLOG, to IPLOG and TCPReset and then Save and Update, it looks like everything is fine, it generates and updates and everything is cool. But what happens is nr.packetd stops or hangs on the sensor. when i do a "idsvers" i get "error timeout" for sensor. when i do a "idsstatus" it shows the service running. i have to manually do a "idsstop" and "idsstart". after this everything seems to start working correctly. I can log in to the router, see the access-list, do a who and it shows the connection. im stumped.
In your statement you say that nr.packetd stops responding to the idsvers command. I was not aware of any issue where nr.packetd stopped responding. However, there is a known issue with nr.managed where it would stop responding after a reconfiguration by CSPM or the Unix Director. This issue has been fixed and testing in v3.0.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...