Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Ficha Técnica descarregar pdf (Página 15)

642-531

-----------------------------------

filter keyword in set rspan command ---> [Catalyst OS using remote SPAN]

Cisco Courseware 5-25

-----------------------------------

allow vlan keyword in switchport capture command ----> [Catalyst IOS using remote SPAN]

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/12_1e/swconfig/span.pdf

Section : Local SPAN and RSPAN Guidelines and Restrictions

------------------------------------

filter keyword in monitor session command -----> [Catalyst IOS using mls ip ids ]

------------------------------------

To monitor specific VLANs when the local or RSPAN source is a trunk port, perform

this task:

This example shows how to monitor VLANs 1 through 5 and VLAN 9 when the source is

a trunk port:

Router(config)# monitor session 2 filter vlan 1 - 5 , 9

QUESTION 38

Which of the following commands are used by a Catalyst switch running Catalyst OS to block attacks, as

directed by an IDS blocking Sensor?

A. acl

B. conduit

C. access-list

D. shun

E. set security acl

Answer: E

Explanation:

Since the Catalyst is using CatOS, D is incorrect.

The proper command to define the security ACL or VACL is set security acl ip switch command

Reference: Page 147, Cisco Press CCSP 2nd Edition, Chapter 6 Capturing Network Traffic.

Cisco Courseware 5-33

QUESTION 39

Study the exhibit below carefully:

According to the exhibit Fast Ethernet connections are used to connect all switches. The RSPAN VLAN is 99.

Both the Catalyst 4000 and Catalyst 6500 are running Catalyst OS.

1 2 ... 10 11 12 13 14 15 16 17 18 19 20 ... 122 123

Sem comentários

Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Ficha Técnica Página 15