Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

4250-XL int2 and physical port

I'm trying to determine if port 1 maps to int2 on the XL card. Can anyone point me to documentation that describes this?

  • Other Security Subjects
Cisco Employee

Re: 4250-XL int2 and physical port

port mappings for IDS-4250-XL:

In step 4 you will see the following statements:

int0 is the sniffing port.

int1 is the command and control port.

int2 is the optional SX (fiber NIC) sniffing port.

int2 and int3 are the optional XL card sniffing ports.

int2 through int5 are the optional 4FE card sniffing ports.

In addition you can refer to:

Which states that on the 4250-XL the int0 port is the TCP Reset interface instead of a sniffing interface.

What is sometimes confusing, however, is that the driver for the XL card does not necessarily list the 2 ports of the XL card as int2, and int3 in all cases.

Instead the 2 ports are sometimes listed as falcon1 and falcon2. Falcon is the name of the driver for the XL card.

Within the IDS software int2 is mapped to falcon1, and int3 is mapped to falcon2.

You can see this is the case in the output of "show interfaces". Here is a small piece of the output:

Sensing int2 is down

Hardware is falcon1, XL

Another thing that has confused some users is that Neither int2 nor int3 will be seen when executing "ifconfig -a" while in the service account. This is because the XL card can not be configured from Linux like standard interfaces, and is therefore not seen when executing "ifconfig -a" and not be monitored with tcpdump.

New Member

Re: 4250-XL int2 and physical port

Thank you for the feedback but I was trying to identify if physical port 1 and physical port 2 on the XL card map to int2 and int3 respectively. I have since discovered this is the case.