11-09-2003 10:36 PM - edited 03-09-2019 05:28 AM
Hi,
I have one new IDS 4215 . When I try to enable 'interface group 0' it is showing processing config ......./ and even after waiting for longer time it still going on and not getting the interface enabled. Due to the same reason I am unable to enable sensing interface int0.
Please let me know how I can enable the sensing interface .
Regards,
11-11-2003 09:13 PM
Look here:
Specifically look at:
Installing Optional PCI Cards
Assigning and Enabling the Sensing Interface
If this answers your question. please clase and rate. Thanks.
11-12-2003 12:48 AM
Hi,
I have already tried enabling the 'interface group 0' by going through the same document. But I am facing problem when I use no shutdown commnad. Instead of immediate prompt I am getting 'processing config.....' message and it never gets through.
I am unable to enable both group & sensing interfaces due to the above reson.
Please let me know how I can solve this problem.
Regards,
02-09-2004 07:48 AM
Was this issue ever resolved? I'm running into the exact same issues with a 4235.
-interface group 0 is disabled
-when I attempt to enable it with 'no shutdown' I'm in a holding pattern with "processing config"
Any help would be appreciated. Thanks.
02-09-2004 08:33 AM
Which Software version are you using? You should get back the prompt fairly quickly from the "Processing config...." message. Another way of enabling the sensing interfaces is while in the interface group "exclude and re-include that particular interface in the group".
Say for example you want to enable int2, you can do the following :
-conf t
-int g 0
-no sen int2
-sen int2
-ex
-ex
Hope this helps.
02-09-2004 08:52 AM
Thanks, but I'm still having issues:
-restarted the sensor
-logged in admin account (cisco)
-conf t
-int g 0
-no sen int0
-the "processing config" just hangs the machine....
When I ssl to the sensor via the IDM, I'm told I can't bring the sniffing interface up until the Group is enabled. When I try to enable the group:
-conf t
-interface group 0
-no shutdown
-again, "processing config" just hangs....
-as well, the connection hangs if I attempt this via the IDM..
A "show version" reports the following:
* IDS-sig-4.1-3-S67
IDS-sig-4.1-3-S68.rpm.pkg
Recovery Partition Version 1.1 - 4.0(1)S37
Thanks.
02-09-2004 08:53 AM
Thanks, but I'm still having issues:
-restarted the sensor
-logged in admin account (cisco)
-conf t
-int g 0
-no sen int0
-the "processing config" just hangs the machine....
When I ssl to the sensor via the IDM, I'm told I can't bring the sniffing interface up until the Group is enabled. When I try to enable the group:
-conf t
-interface group 0
-no shutdown
-again, "processing config" just hangs....
-as well, the connection hangs if I attempt this via the IDM..
A "show version" reports the following:
* IDS-sig-4.1-3-S67
IDS-sig-4.1-3-S68.rpm.pkg
Recovery Partition Version 1.1 - 4.0(1)S37
Thanks.
02-09-2004 09:04 AM
Can you please post the entire "sh version"? I suspect the Analysis Engine is either not running or in bad state. And also how are you restarting the sensor?
Thanks
02-09-2004 09:36 AM
Thanks.
As displayed by "System Information":
Cisco Systems Intrusion Detection System, Version 4.1(3)S68
MainApp 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500Running
AnalysisEngine 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500Running
Authentication 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500Running
Logger 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500Running
NetworkAccess 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500Running
TransactionSource 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500Running
WebServer 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500Running
Thanks again.
02-09-2004 09:42 AM
Thanks.
As displayed by "System Information":
Cisco Systems Intrusion Detection System, Version 4.1(3)S68
MainApp 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500Running
AnalysisEngine 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500Running
Authentication 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500Running
Logger 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500Running
NetworkAccess 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500Running
TransactionSource 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500Running
WebServer 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500Running
Thanks again.
02-09-2004 10:15 AM
For what its worth....
After attempting to enable Group 0 from the IDM interface, a 'show version' on the sensor does report the analysis_engine as 'not running.'
Thanks.
02-09-2004 11:22 AM
I tried the same operations on a 4250 here in lab with the same software version and see no problems. Can you please provide via the CLI:
1. Output for "sh ver" and "sh int" before and after the attempt to enable the interface group. (want to check for analysisEngine state). You can wait for around 10 minutes for the output after you enable the interface. AnalysisEngine takes a while to stabilize.
And also via the service account :
1. do a "ps -e fw" to check for any defunct process
2. Check for any core file under "usr/cids/idsRoot/core/sensorApp".
3. Check for messages at the end of the log file main.log under "usr/cids/idsRoot/log"
The above 3 steps have to be done again before and after the attempt to the enable the group.
02-09-2004 10:31 AM
For what its worth....
After attempting to enable Group 0 from the IDM interface, a 'show version' on the sensor does report the analysis_engine as 'not running.'
Thanks.
02-09-2004 10:33 AM
For what its worth....
After attempting to enable Group 0 from the IDM interface, a 'show version' on the sensor does report the analysis_engine as 'not running.'
Thanks.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide