Twitter Facebook

Jump to content



For Support/complaints mail to [email protected]

For Data center questions: Datacenter-IE.com & DC-IE.com & CCIEDatacenter-IE.com
For Routing and Switching questions: Router-IE.com & CCIERNS-IE.com
For Security questions: Security-IE.com & CCIESecurity-IE.com
For Wireless questions: Wireless-IE.com & CCIEWireless-IE.com
For Service Provider questions: ServiceProvider-IE.com & SP-IE.com & CCIEServiceProvider-IE.com
For Collaboration-IE questions : Collaboration-IE.com & CollaborationIE.com & CCIECollaboration-IE.com
For CCDE-IE questions - CCDE-IE.com
For JUNIPER-IE questions : JUNIPER-IE.com & JUNIPERIE.com


Photo

Emulating IPS on UNL


5 replies to this topic

#1 menon musa

 
menon musa

    Newbie

  • Members
  • Pip
  • 1 posts
  • 0 thanks
 

Posted 24 September 2015 - 10:24 AM

Hi everyone,

below my step to deploy IPS in UNL :

  • Download "IPSforty-two-forty.ova"
    This link from daveguy: http://www.4shared.c...-two-forty.html

     
  • Open "IPSforty-two-forty.ova" with VMplayer to extract into "IPSforty-two-forty-disk1.vmdk" and "IPSforty-two-forty-disk2.vmdk"
     
  • Run Unetlab
     
  • Run "WinSCP" to login to Unetlab (username=root, passw=root), its alot easier than command line on linux
    download WinSCP : http://winscp.net/eng/download.php
     
  • Via WinSCP, go to directory "/opt/unetlab/addons/qemu"
     
  • Create new folder "cips-4240"
     
  • Copy "IPSforty-two-forty-disk1.vmdk" and "IPSforty-two-forty-disk2.vmdk" from your computer into "/opt/unetlab/addons/qemu/cips-4240" on UnetLab
     
  • Convert file vmdk into qcow2 format, you must login to Unetlab console
            login as: root         [email protected]'s password:         Welcome to Ubuntu 14.04.2 LTS (GNU/Linux 3.13.0-52-generic x86_64)         [email protected]:~# cd /opt/unetlab/addons/qemu/cips-4240/         [email protected]:/opt/unetlab/addons/qemu/cips-4240# qemu-img convert -f vmdk -O qcow2 IPSforty-two-forty-disk1.vmdk hda.qcow2         [email protected]:/opt/unetlab/addons/qemu/cips-4240# qemu-img convert -f vmdk -O qcow2 IPSforty-two-forty-disk2.vmdk hdb.qcow2         
  • Via WinSCP, delete 2 files vmdk
     
  • fix permissions
            [email protected]:/opt/unetlab/addons/qemu/cips-4240# /opt/unetlab/wrappers/unl_wrapper -a fixpermissions
            
  • Now try to create new Lab, add new nodes, and taraa, you should see "image:cips-4240"
     
  • Open the lab and run the node, then console the IPS
     
  • Now lets fix the interfaces problems
     
  • Log in to the IPS using account 'service' and password 'ciscoips123'
     
  • Type:  vi /usr/cids/idsRoot/etc/interface.conf (you need to know how to use the text editor 'vi')
     
  • Scroll down until you see the section [models/IPS-4240/interfaces]
     
  • Edit the "pci-path" section for each interface to match the QEMU PCI bus address of each NIC.  QEMU E1000 bus addresses are usually:
    3.0
    4.0
    5.0
    6.0
    7.0
     
  • need to change the device ID as well for each one
    Change every instance of:
    device-id=0x100f
    to
    device-id=0x100e
  • Save the file and reboot the IPS sensor.
     
  • login using account "cisco" pass "cisco" or "ciscoips123"

thats all

thanx to daveguy, paulno1, Unholydarkness 


  • Personal Loans, Fake Essay Writer, Getting A Loan and 4 others like this

#2 jagvindar shing

 
jagvindar shing

    Newbie

  • Members
  • Pip
  • 1 posts
  • 0 thanks
 

Posted 24 September 2015 - 10:32 AM

Q. How do I resolve the error message Cid/W Warning - DNS or HTTP proxy is required for global correlation inspection and reputation filtering but no DNS or proxy servers are defined.Add an HTTP proxy server or DNS server in the 'host' service configuration?
 


A. Complete these tasks in order to resolve this issue:


  • Disable global correlation.

  • Add the proxy/dns configuration.


#3 raonistein

 
raonistein

    Newbie

  • Members
  • Pip
  • 1 posts
  • 0 thanks
 

Posted 28 March 2016 - 03:51 PM

Hi Menon,
could you kindly provide the IPSW file forty-two-forty.ova again?
I can not find him anymore.



#4 Pankaj_Guwalani

 
Pankaj_Guwalani

    Newbie

  • Members
  • Pip
  • 6 posts
  • 0 thanks
 

Posted 23 October 2016 - 06:17 AM

link not working for ips forty two forty



#5 dingleberrydoo2

 
dingleberrydoo2

    Member

  • Members
  • PipPip
  • 16 posts
  • 0 thanks
 

Posted 24 October 2016 - 11:45 PM

I used 4260 and it works



#6 vineethb007

 
vineethb007

    Newbie

  • Members
  • Pip
  • 1 posts
  • 0 thanks
 

Posted 12 August 2017 - 08:07 PM

Hi can anyone give me the link to IPSforty-two-forty.ova 
need IPS6 or 7.





Reply to this topic



  


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users