Intrusion Detection/Intrusion Prevention System
Left running head:
Chapter name (automatic)
848
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide
Alcatel-Lucent
INTRUSION SENSOR
intrusion sensor <name> snort [no threshold|threshold <1-
4294967295> <1-4294967295>]}
DESCRIPTION
This command is entered in the Firewall Configuration Mode. This command is
used to create an IDS/IPS sensor based on Snort.
Use ‘threshold’ keyword to configure the threshold for the sensor.
Use ‘no threshold’ keyword to remove threshold configured for the sensor.
PARAMETER
EXAMPLE
ALU(config)#firewall
ALU(config-firewall)#intrusion sensor sensor1 snort threshold
10 1000
ALU(config-firewall-intrusion-sensor-sensor1)#
INTRUSION SNORT
intrusion snort
DESCRIPTION
This command is entered in the Firewall Configuration Mode. This command
enters the snort configuration mode.
PARAMETER
None.
EXAMPLE
ALU(config)# firewall
ALU(config-firewall)# intrusion snort
ALU(config-firewall-intrusion-snort)#
Parameter Description
name Name of the sensor.
1-4294967295 Threshold number. This denotes the
number of packets per second.
1-4294967295 This denotes the threshold time in
milliseconds inside which if the specified
threshold number of packets are
received, those packets are treated as
attacks.
no threshold Remove threshold from sensor.