5-28
Cisco Wireless LAN Controller Configuration Guide
OL-9141-03
Chapter 5 Configuring Security Solutions
Configuring IDS
Step 5 The Port field contains the number of the HTTPS port through which the controller is to communicate
with the IDS sensor. Cisco recommends that you set this parameter to 443 because the sensor uses this
value to communicate by default.
Default: 0
Range: 1 to 65535
Step 6 In the Username field, enter the name that the controller uses to authenticate to the IDS sensor.
Note This username must be configured on the IDS sensor and have at least a read-only privilege.
Step 7 In the Password and Confirm Password fields, enter the password that the controller uses to authenticate
to the IDS sensor.
Step 8 In the Query Interval field, enter the time (in seconds) for how often the controller should query the IDS
server for IDS events.
Default: 0 seconds
Range: 10 to 3600 seconds
Step 9 Check the State check box to register the controller with this IDS sensor or uncheck this check box to
disable registration.
Step 10 Enter a 40-hexadecimal-character security key in the Fingerprint field. This key is used to verify the
validity of the sensor and is used to prevent security attacks.
Note Do not include the colons that appear between every two bytes within the key. For example, enter
AABBCCDD instead of AA:BB:CC:DD.
Step 11 Click Apply. Your new IDS sensor appears in the list of sensors on the CIDS Sensors List page.
Step 12 Click Save Configuration to save your changes.
Using the CLI to Configure IDS Sensors
Follow these steps to configure IDS sensors using the controller CLI.
Step 1 To add an IDS sensor, enter this command:
config wps cids-sensor add index ids_ip_address username password
The index parameter determines the sequence in which the controller consults the IPS sensors. The
controller supports up to five IPS sensors. Enter a number (between 1 and 5) to determine the priority of
this sensor. For example, if you enter 1, the controller consults this IPS sensor first.
Note The username must be configured on the IDS sensor and have at least a read-only privilege.
Step 2 (Optional) To specify the number of the HTTPS port through which the controller is to communicate
with the IDS sensor, enter this command:
config wps cids-sensor port index port_number
To Next Page
Loading...
Need help?
General
