McAfee GUARD DOG 2 Guía de instalación descargar pdf (Pagina 11)

McAfee

IntruShield

IPS System IntruShield Best Practices

Special Topics: Best Practices Ensuring connectivity between the sensor and other network devices

Use the following commands to verify fixed interface settings on some Cisco devices

that connect to IntruShield sensors:

Cisco PIX® Firewall

 interface ethernet0 100full

Cisco CSS 11000

 interface ethernet-3

 phy 100Mbits-FD

Cisco Catalyst® 2900XL, 3500XL Series (Hybrid)

 interface FastEthernet0/2

 duplex full

 speed 100

Cisco Catalyst 4000, 5000, 6000 Series (Native)

 set port speed 1/1 100

 set port duplex 1/1 full

Cisco IOS® for Catalyst 4000, 6000 Series

 Router(config)# interface fastethernet slot/port

 Router(config-if)# speed 100

 Router(config-if)# duplex full

When troubleshooting IntruShield performance issues with Cisco switches, view the

output of the

show port mod/port command, and note the counter information.

Explanation of CatOS show port command counters

Counter Description Possible Causes

Alignment

Errors

Alignment errors are a count of the

number of frames received that do not

end with an even number of octets and

have a bad CRC.

These are the result of collisions at half-duplex,

duplex mismatch, bad hardware (NIC, cable, or port),

or a connected device generating frames that do not

end with on an octet and have a bad FCS.

FCS FCS error count is the number of

frames that were transmitted or

received with a bad checksum (CRC

value) in the Ethernet frame. These

frames are dropped and not propagated

onto other ports.

These are the result of collisions at half-duplex,

duplex mismatch, bad hardware (NIC, cable, or port),

or a connected device generating frames with bad

FCS.

Xmit-Err This is an indication that the internal

transmit buffer is full.

This is an indication of excessive input rates of traffic.

This is also an indication of transmit buffer being full.

The counter should only increment in situations in

which the switch is unable to forward out the port at

a desired rate. Situations such as excessive collisions

and 10 Mb ports cause the transmit buffer to become

full. Increasing speed and moving the link partner to

full-duplex should minimize this occurrence.

1 2 ... 6 7 8 9 10 11 12 13 14 15 16 ... 24 25

Comentarios a estos manuales

Sin comentarios

McAfee GUARD DOG 2 Guía de instalación Pagina 11

Comentarios a estos manuales

Relacionado con productos y manuales para No McAfee GUARD DOG 2