Quantcast
Channel: IEOC - INE's Online Community
Viewing all articles
Browse latest Browse all 10744

IPS Promiscuous Mode

$
0
0

Hi,

I read the task (3.50) and I can't see where is the information that we should send traffic to destination as untagged:

 

"- Configure the management IP address to be 136.1.43.100/24, and set the default gateway to 136.1.43.9; ensure that HTTP management access is allowed only from VLAN 37.
- Configure SW3 to send VLAN 37 traffic to the IPS. Traffic should not be received by SW1. Avoid traffic duplication and associate TCP resets with VLAN 37.
- Configure SW4 to send Gi1/0/7 traffic to the IPS and allow tagged inbound TCP resets.
- Enable signature 2000 for VLAN 37 traffic and signature 2004 for Gi1/0/7 traffic."

 

and provided solution:

monitor session 1 destination interface Gi1/0/9 ingress untagged vlan 37

 

Is the below solution correct as well?

monitor session 1 destination interface Gi1/0/9 encapsulation dot1q ingress dot1q vlan 37

 

regards

Hubert


Viewing all articles
Browse latest Browse all 10744

Latest Images

Trending Articles



Latest Images