Cisco IDS 4210 - Intrusion Detection Sys 4210... User manual

CHAPTER
2-1
Installing Cisco Intrusion Prevention System Appliances and Modules 5.1
OL-8677-01
2
Installing IDS-4210
This chapter describes IDS-4210 and how to install it and its accessories.
Note IDS-4215 replaced IDS-4210, which is no longer sold.
Note If you purchased an IDS-4210 before July 2003, you must upgrade the memory to 512 MB to install
Cisco IPS 5.x. for more information, see Upgrading the Memory, page 2-3.
Note IDS-4210 does not support inline (IPS) mode.
Caution The BIOS on IDS-4210 is specific to IDS-4210 and must only be upgraded under instructions from Cisco
with BIOS files obtained from the Cisco website. Installing a non-Cisco or third-party BIOS on
IDS-4210 voids the warranty. For more information on how to obtain instructions and BIOS files from
the Cisco website, see Obtaining Obtaining Cisco IPS Software, page 11-1.
This chapter contains the following sections:
•Front and Back Panel Features and Indicators, page 2-2
•Upgrading the Memory, page 2-3
•Installing IDS-4210, page 2-5
•Installing the Accessories, page 2-7

2-2
Installing Cisco Intrusion Prevention System Appliances and Modules 5.1
OL-8677-01
Chapter 2 Installing IDS-4210
Front and Back Panel Features and Indicators
Front and Back Panel Features and Indicators
Figure 2-1 shows the front panel indicators on IDS-4210.
Figure 2-1 Front Panel Features
Table 2-1 describes the appearance and function of the front panel indicators.
87951
Power indicator
System fault indictor
Hard-disk drive
activity indicator
LAN 1 activity/link
indicator
LAN 2 activity/link
indicator
2
1
Table 2-1 Front Panel Indicators
Indicator Color Function
Power Green Lights up when the system is connected to an AC
power source; blinks when the system is in sleep
mode.
System fault Amber Blinks during system startup or when a system fault is
detected.
Hard-disk drive activity Green Blinks when hard-disk drive activity occurs.
LAN1 activity/link Amber Lights up when the LAN1 connector is linked to an
Ethernet port; blinks when activity occurs on this
channel.
LAN2 activity/link Amber Lights up when the LAN2 connector is linked to an
Ethernet port; blinks when activity occurs on this
channel.

2-3
Installing Cisco Intrusion Prevention System Appliances and Modules 5.1
OL-8677-01
Chapter 2 Installing IDS-4210
Upgrading the Memory
Figure 2-2 shows the back panel features on IDS-4210.
Figure 2-2 Back Panel Features
Upgrading the Memory
IDS-4210, IDS-4210-K9, and IDS-4210-NFR must have 512 MB of RAM to support Cisco IPS 5.1. If
you are upgrading an existing IDS-4210, IDS-4210-K9, or IDS-4210-NFR to 5.1, you must insert one
additional 256-MB DIMM (part number IDS-4210-MEM-U) to upgrade the memory to the required 512
MB minimum.
Note Do not install an unsupported DIMM. Doing so nullifies the warranty.
Caution Follow proper safety procedures when performing these steps by reading the safety warnings in
Regulatory Compliance and Safety Information for the Cisco Intrusion Prevention System 4200 Series
Appliance Sensor.
To upgrade the memory, follow these steps:
Step 1 Log in to the CLI.
Step 2 Prepare the appliance to be powered off:
sensor# reset powerdown
Wait for the power down message before continuing with Step 3.
Note You can also power down the sensor from IDM or ASDM.
Step 3 Power off the appliance.
Step 4 Remove the power cord and other cables from the appliance.
Step 5 Place the appliance in an ESD-controlled environment.
For more information, see Working in an ESD Environment, page 1-25.
83723
AC power Mouse
(unused)
Command and Control
interface FastEthernet0/1
COM1
Keyboard Sensing interface
FastEthernet0/0
USB
(unused)
Video

2-4
Installing Cisco Intrusion Prevention System Appliances and Modules 5.1
OL-8677-01
Chapter 2 Installing IDS-4210
Upgrading the Memory
Step 6 Remove the chassis cover by unscrewing the screw on the front of the cover and sliding the cover straight
back.
Step 7 Locate the DIMM sockets and select the empty DIMM socket next to the existing DIMM.
Note The existing DIMM is installed in socket 0. The angled position of the DIMM sockets make
installing an additional DIMM in socket 1 difficult if a DIMM occupies socket 0. Therefore, you
should first remove the existing DIMM from socket 0, place the new DIMM in socket 1, and then
replace the existing DIMM in socket 0.
Step 8 Locate the ejector tabs on either side of the DIMM socket. Press down and out on tabs to open the slot
in the socket.
Step 9 Install the new DIMM, by positioning the DIMM into the socket and pressing it into place.
Note Do not force the DIMM into the socket. Alignment keys on the DIMM ensure that it only fits in
the socket one way. If you need additional leverage, you can gently press down on the DIMM
with your thumbs while pulling up on the ejector tabs.
Step 10 Replace the chassis cover and reconnect the power.
Step 11 Power on the sensor and make sure the new memory total is correct.
Note If the memory total does not reflect the added DIMMs, repeat Steps 1 through 4 to ensure the
DIMMs are seated correctly in the socket.
Bank 3
41167
DIMM
Bank 0
Bank 2
Bank 1

2-5
Installing Cisco Intrusion Prevention System Appliances and Modules 5.1
OL-8677-01
Chapter 2 Installing IDS-4210
Installing IDS-4210
Installing IDS-4210
Warning Only trained and qualified personnel should be allowed to install, replace, or service this equipment.
Statement 1030
Caution Follow proper safety procedures when performing these steps by reading the safety warnings in
Regulatory Compliance and Safety Information for the Cisco Intrusion Prevention System 4200 Series
Appliance Sensor.
Note If you purchased an IDS-4210 before July 2003, you must upgrade the memory to 512 MB to install
Cisco IPS 5.x. For more information, see Upgrading the Memory, page 2-3.
To install IDS-4210 on the network, follow these steps:
Step 1 Position IDS-4210 on the network.
Step 2 Attach the power cord to IDS-4210 and plug it in to a power source (a UPS is recommended).
Note When you first plug an IDS-4210 into a power source, it powers on momentarily and then powers
off leaving the NIC link lights lit. This is normal behavior. Press the power switch to boot the
system into operation.
Step 3 Use the dual serial communication cable (PN 72-1847-01, included in the accessory kit) to attach a
laptop to the COM1 port of IDS-4210 (see Table 2-2 for a list of the terminal settings), or connect a
keyboard and monitor to IDS-4210.
Caution We recommend that you use the dual serial communication cable (PN 72-1847-01, included in the
accessory kit) rather than a keyboard and monitor, because some keyboards and monitors may be
incompatible with IDS-4210.
Ta b l e 2 - 2 Te rm i n a l S e t t i n g s
Terminal Setting
Bits per second 9600
Data bits 8
Parity None
Stop bits 1
Flow control Hardware or RTS/CTS

2-6
Installing Cisco Intrusion Prevention System Appliances and Modules 5.1
OL-8677-01
Chapter 2 Installing IDS-4210
Installing IDS-4210
Note You can use a 180 rollover or straight-through patch cable to connect IDS-4210 to a port on a
terminal server with RJ-45 or hydra cable assembly connections. Use a M.A.S.H adapter (part
number 29-4077-02) to connect the appropriate cable to a port on the terminal server. For the
instructions for setting up a terminal server, see Setting Up a Terminal Server, page 1-14.
Step 4 Attach the network cables.
IDS-4210 has the following interfaces:
•FastEthernet0/0 is the sensing port.
•FastEthernet0/1 is the command and control port.
Caution Management and console ports are privileged administrative ports. Connecting them to an untrusted
network can create security concerns.
Step 5 Upgrade the memory on IDS-4210.
For the procedure, see Upgrading the Memory, page 2-3.
Caution You must upgrade the memory on IDS-4210 to a minimum of 512 MB before you can install the most
recent Cisco IPS software.
Step 6 Power on IDS-4210.
Step 7 Initialize IDS-4210.
For the procedure, see Initializing the Sensor, page 10-2.
Step 8 Upgrade IDS-4210 to the latest Cisco IPS software.
For the procedure, see Obtaining Cisco IPS Software, page 11-1.
You are now ready to configure intrusion detection on the appliance.
83723
AC power Mouse
(unused)
Command and Control
interface FastEthernet0/1
COM1
Keyboard Sensing interface
FastEthernet0/0
USB
(unused)
Video

2-7
Installing Cisco Intrusion Prevention System Appliances and Modules 5.1
OL-8677-01
Chapter 2 Installing IDS-4210
Installing the Accessories
For More Information
•For the procedure for using HTTPS to log in to IDM, refer to Logging In to IDM.
•For the procedures for configuring intrusion prevention on your sensor, refer to the following
documents:
– Installing and Using Cisco Intrusion Prevention System Device Manager 5.1
– Configuring the Cisco Intrusion Prevention System Sensor Using the Command Line Interface
5.1
Installing the Accessories
You can install a bezel, and center or front mounting brackets for the IDS-4210.
This section contains the following topics:
•Accessories Package Contents, page 2-7
•Installing and Removing the Bezel, page 2-7
•Installing Center Mount Brackets, page 2-8
•Installing Front Mount Brackets, page 2-10
Accessories Package Contents
The following items are shipped in the accessories package for IDS-4210:
•Cisco IDS-4210 bezel
•Power cable
•Network patch cable
•Computer interconnection cable
•Dual serial communication cable
•Rack mounting brackets
•Documentation and software
– Cisco IDS recovery/upgrade CD
– Cisco Documentation CD
– Documentation Roadmap for Cisco Intrusion Prevention System 5.1
– Regulatory Compliance and Safety Information for the Cisco Intrusion Prevention System 4200
Series Appliance Sensor
Installing and Removing the Bezel
You can install a Cisco bezel for IDS-4210.
To install and remove the bezel on IDS-4210, follow these steps:

2-8
Installing Cisco Intrusion Prevention System Appliances and Modules 5.1
OL-8677-01
Chapter 2 Installing IDS-4210
Installing the Accessories
Step 1 To insert the bezel on IDS-4210, follow these steps:
a. Align the bottom tabs on the bezel with the slots on IDS-4210.
b. Align the side tabs on the bezel with the slots on IDS-4210.
c. Press the bezel into IDS-4210.
Step 2 To remove the bezel from IDS-4210, press the side tabs and pull.
Installing Center Mount Brackets
You need the following tools and supplies to install the brackets in a two-post, open-frame relay rack:
•#2 Phillips screwdriver
•Masking tape or felt-tip pen to mark the mounting holes to be used
To install the center mount brackets in a two-post, open-frame relay rack, follow these steps:
Step 1 Determine where you want to place IDS-4210.
Step 2 Mark the upper and lower mounting positions on the two posts.

2-9
Installing Cisco Intrusion Prevention System Appliances and Modules 5.1
OL-8677-01
Chapter 2 Installing IDS-4210
Installing the Accessories
Step 3 Locate one of the two brackets and align it over the two threaded holes on the side of IDS-4210 (see
Figure 2-3).
Figure 2-3 Installing Center Mount Brackets
Step 4 Secure the bracket to IDS-4210 chassis using two screws (see Figure 2-3 on page 2-9).
Step 5 Repeat Step 4 to install the remaining bracket on the other side of IDS-4210.
50623
LINK
CONS ETHERNET 0 ETHERNET 1 SCSI LVD ONLY
100Mbps LINK 100Mbps DRIVE 0
DRIVE 0
DRIVE 1
DRIVE 1
0123
Pan-head
Phillips screws
Pan-head
Phillips screws
(2 per bracket)

2-10
Installing Cisco Intrusion Prevention System Appliances and Modules 5.1
OL-8677-01
Chapter 2 Installing IDS-4210
Installing the Accessories
Step 6 Lift IDS-4210 into position between the two posts with the hole in the mounting bracket aligned one hole
above the mark you made in the two posts (see Figure 2-3 on page 2-9).
Step 7 Secure IDS-4210 to the rack using a screw through the mounting bracket to the front of the left and right
posts (see Figure 2-3 on page 2-9).
Installing Front Mount Brackets
Make sure you have the following supplies (found in the front mount bracket assembly kit) and tools to
install the front mount brackets in a two-post, open-frame relay rack:
•Two chassis support brackets
•Two rack-mounting brackets
•Six screws
•#2 Phillips screwdriver
Note The front mount bracket assembly is not intended for use as a slide rail system. The server must be firmly
attached to the rack, as shown in Figure 2-4.
Figure 2-4 Front Mount Brackets
55150
LINK
CONS ETHERNET 0 ETHERNET 1 SCSI LVD ONLY
100Mbps LINK 100Mbps DRIVE 0
DRIVE 0
DRIVE 1
DRIVE 1
0123
Pan-head
Phillips screws
Pan-head
Phillips screws
(to rack)