Search This Blog

Wednesday, January 19, 2011

IPS 6.x on GNS3

http://certcollection.org/forum/index.php?/topic/22096-offer-ips-on-gns307/

At the grub menu, press "e" to edit the first boot entry. In the following menu, select the 2nd line (that starts with "kernel=") and press "e" again. Change the option init=/loadrc to init=1, then Enter followed by "b" to boot.

The IPS software now boots into runlevel 1. When prompted, press Enter and do the follwing

/loadrc
cd /etc/init.d
./rc.init
cp ids_functions ids_functions.orig
vi ids_functions

The file controls the selection of the platform based on various criteria (asset data read through i2c, CPU speed etc.). Also, the default command and control interface gets selected. We trick the selection process by making sure that a IDS-4215 gets detected (the other detection steps fail here, obviously). In that file, search for the string "845" (with vi: /845), it will jump to the following section:

elif [[ `isCPU 845` -eq $TRUE && $NUM_OF_PROCS -eq 1 ]]; then
MODEL=$IDS4215
HTLBLOW=8
MEM_PAGES=${HTLBLOW}
DEFAULT_MGT_OS="fe0_0"
DEFAULT_MGT_CIDS="FastEthernet0/0"

Replace the first line (the elif statement) and the variables DEFAULT_MGT_OS and DEFAULT_MGT_CIDS to the following:

elif [[ 1 -eq 1 ]]; then
MODEL=$IDS4215
HTLBLOW=8
MEM_PAGES=${HTLBLOW}
DEFAULT_MGT_OS="ge0_0"
DEFAULT_MGT_CIDS="GigabitEthernet0/0"

Save and exit vi.

Now its time to adjust the process of mapping the emulated NIC cards to the IPS interfaces.

cd /usr/cids/idsRoot/etc
cp interfaces.conf interfaces.conf.orig
vi interfaces

Use the Setting for your Interface Change.

[models/IDS-4215/interfaces/1]
name-template=GigabitEthernet0/0
port-number=0
pci-path=3.0
vendor-id=0x8086
device-id=0x100e
type=ge
mgmt-capable=yes
net-dev-only=yes
fixed-speed=yes
fixed-duplex=yes

[models/IDS-4215/interfaces/2]
name-template=GigabitEthertnet0/1
port-number=1
pci-path=4.0
vendor-id=0x8086
device-id=0x100e
type=ge
sensing-capable=yes
tcp-reset-capable=yes
fixed-speed=yes
fixed-duplex=yes

[models/IDS-4215/interfaces/3]
name-template=GigabitEthernet0/2
port-number=2
pci-path=5.0
vendor-id=0x8086
device-id=0x100e
type=ge
sensing-capable=yes
tcp-reset-capable=yes
fixed-speed=yes
fixed-duplex=yes

[models/IDS-4215/interfaces/4]
name-template=GigabitEthernet0/3
port-number=3
pci-path=6.0
vendor-id=0x8086
device-id=0x100e
type=ge
sensing-capable=yes
tcp-reset-capable=yes
fixed-speed=yes
fixed-duplex=yes


[models/IDS-4215/interfaces/5]
name-template=GigabitEthernet0/4
port-number=4
pci-path=7.0
vendor-id=0x8086
device-id=0x100e
type=ge
sensing-capable=yes
tcp-reset-capable=yes
fixed-speed=yes
fixed-duplex=yes

[models/IDS-4215/interfaces/6]
name-template=GigabitEthernet0/5
port-number=5
pci-path=8.0
vendor-id=0x8086
device-id=0x100e
type=ge
sensing-capable=yes
tcp-reset-capable=yes
fixed-speed=yes
fixed-duplex=yes

No comments:

Post a Comment