Thursday, May 17, 2012

Cisco: How To Put An IP Address On A ASA-SSM-10 IPS Module In An ASA 55X0

I wanted to go through how to put an IP address on an IPS module sensor that resides in an ASA.  I also want to make sure my network can access the IPS sensor as well.  Below is the process I went through to get this in place.  I also have made sure I have a cable plugged into the IPS module and that its in the right vlan on the switch Im connecting to.
Settings:
Sensor IP address: 192.168.255.130/16
Gateway IP address:  192.168.255.254
Who has access to the IPS sensor:  192.168.0.0/16

CLI in the sensor:
sensor# config t
sensor(config)# service  host
sensor(config-hos)# network-settings
sensor(config-hos-net)#  host-ip 192.168.255.130/16,192.168.255.254
sensor(config-hos-net)#  access-list 192.168.0.0/16
sensor(config-hos-net)#  exit
sensor(config-hos)# exit
Apply Changes?[yes]: yes
sensor(config)#
sensor(config)#
sensor(config)# exit

Now, I should be able to ping the IPS sensor:
C:\Users\skillen>ping 192.168.255.130

Pinging 192.168.255.130 with 32 bytes of data:
Reply from 192.168.255.130: bytes=32 time=1ms TTL=64
Reply from 192.168.255.130: bytes=32 time<1ms TTL=64
Reply from 192.168.255.130: bytes=32 time<1ms TTL=64
Reply from 192.168.255.130: bytes=32 time<1ms TTL=64

Just FYI, here is what a ASA-SSM-10 IPS module looks like: