Twitter Facebook

Jump to content

For Support/complaints mail to [email protected]

For Data center questions: & &
For Routing and Switching questions: &
For Security questions: &
For Wireless questions: &
For Service Provider questions: & &
For Collaboration-IE questions : & &
For CCDE-IE questions -
For JUNIPER-IE questions : &


Emulating IPS on UNL

5 replies to this topic

#1 menon musa

menon musa


  • Members
  • Pip
  • 1 posts
  • 0 thanks

Posted 24 September 2015 - 10:24 AM

Hi everyone,

below my step to deploy IPS in UNL :

  • Download "IPSforty-two-forty.ova"
    This link from daveguy: http://www.4shared.c...-two-forty.html

  • Open "IPSforty-two-forty.ova" with VMplayer to extract into "IPSforty-two-forty-disk1.vmdk" and "IPSforty-two-forty-disk2.vmdk"
  • Run Unetlab
  • Run "WinSCP" to login to Unetlab (username=root, passw=root), its alot easier than command line on linux
    download WinSCP :
  • Via WinSCP, go to directory "/opt/unetlab/addons/qemu"
  • Create new folder "cips-4240"
  • Copy "IPSforty-two-forty-disk1.vmdk" and "IPSforty-two-forty-disk2.vmdk" from your computer into "/opt/unetlab/addons/qemu/cips-4240" on UnetLab
  • Convert file vmdk into qcow2 format, you must login to Unetlab console
            login as: root         [email protected]'s password:         Welcome to Ubuntu 14.04.2 LTS (GNU/Linux 3.13.0-52-generic x86_64)         [email protected]:~# cd /opt/unetlab/addons/qemu/cips-4240/         [email protected]:/opt/unetlab/addons/qemu/cips-4240# qemu-img convert -f vmdk -O qcow2 IPSforty-two-forty-disk1.vmdk hda.qcow2         [email protected]:/opt/unetlab/addons/qemu/cips-4240# qemu-img convert -f vmdk -O qcow2 IPSforty-two-forty-disk2.vmdk hdb.qcow2         
  • Via WinSCP, delete 2 files vmdk
  • fix permissions
            [email protected]:/opt/unetlab/addons/qemu/cips-4240# /opt/unetlab/wrappers/unl_wrapper -a fixpermissions
  • Now try to create new Lab, add new nodes, and taraa, you should see "image:cips-4240"
  • Open the lab and run the node, then console the IPS
  • Now lets fix the interfaces problems
  • Log in to the IPS using account 'service' and password 'ciscoips123'
  • Type:  vi /usr/cids/idsRoot/etc/interface.conf (you need to know how to use the text editor 'vi')
  • Scroll down until you see the section [models/IPS-4240/interfaces]
  • Edit the "pci-path" section for each interface to match the QEMU PCI bus address of each NIC.  QEMU E1000 bus addresses are usually:
  • need to change the device ID as well for each one
    Change every instance of:
  • Save the file and reboot the IPS sensor.
  • login using account "cisco" pass "cisco" or "ciscoips123"

thats all

thanx to daveguy, paulno1, Unholydarkness 

  • Personal Loans, Fake Essay Writer, Getting A Loan and 4 others like this

#2 jagvindar shing

jagvindar shing


  • Members
  • Pip
  • 1 posts
  • 0 thanks

Posted 24 September 2015 - 10:32 AM

Q. How do I resolve the error message Cid/W Warning - DNS or HTTP proxy is required for global correlation inspection and reputation filtering but no DNS or proxy servers are defined.Add an HTTP proxy server or DNS server in the 'host' service configuration?

A. Complete these tasks in order to resolve this issue:

  • Disable global correlation.

  • Add the proxy/dns configuration.

#3 raonistein



  • Members
  • Pip
  • 1 posts
  • 0 thanks

Posted 28 March 2016 - 03:51 PM

Hi Menon,
could you kindly provide the IPSW file forty-two-forty.ova again?
I can not find him anymore.

#4 Pankaj_Guwalani



  • Members
  • Pip
  • 6 posts
  • 0 thanks

Posted 23 October 2016 - 06:17 AM

link not working for ips forty two forty

#5 dingleberrydoo2



  • Members
  • PipPip
  • 16 posts
  • 0 thanks

Posted 24 October 2016 - 11:45 PM

I used 4260 and it works

#6 razor2663



  • Members
  • Pip
  • 1 posts
  • 0 thanks

Posted 12 August 2017 - 08:07 PM


Reply to this topic


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users