McAfee IIP-M65K-ISAA Quick Start Guide - Page 3

Sensors > Manage Sensors, Submit

Page 3 highlights

Tip: This screen is where you manage your sensor licenses by adding and deleting licenses as necessary. 4. Click Sensors > Manage Sensors, and then click Add. Figure 12: Add the sensor 5. Type information in the appropriate fields and click Submit. Figure 13: Update the Manager with new sensor STEP 3: Configure the sensor Configure sensor information Configure the sensor with the network information, a name, and the shared secret key that the sensor uses to establish secure communication with the Manager. Use the name and key values you set in Step 2. Tip: The first time you configure a sensor, you must have physical access to the sensor. At any time during configuration, you can type a question mark (?) to get help on the sensor command-line interface (CLI) commands. For a list of all commands, type commands. 1. Log on to the sensor using the terminal connected to the Console port. 2. At the prompt, log on using the default sensor username (admin) and password (admin123). Figure 14: Sensor CLI log on 3. Optional, but recommended. Change the sensor password: At the prompt, type: passwd The sensor prompts you to enter the new password and prompts you for the old password. Note: A password must contain between 8 and 25 characters, is case-sensitive, and can consist of any alphanumeric character or symbol. 4. Set the name of the sensor: Tip: You can enter the setup command at the prompt and this will automatically prompt you to provide the information shown in items 4 through 7 and item 10. Or, you use the set command instead. If you use the set command, you must manually enter the complete command syntax as shown in items 4 through 7 and item 10. At the prompt, type: set sensor name Example: set sensor name HR_sensor1 Note: The sensor name is a case-sensitive character string up to 25 characters. The string can include hyphens, underscores, and periods, and must begin with a letter. 5. If the sensor is not on the same network as the Manager, set the address of the default gateway: At the prompt, type: set sensor gateway Example: set sensor gateway 192.168.3.68 6. Set the IP address of the Manager server: At the prompt, type: set manager ip Example: set manager ip 192.168.2.8 7. Set the IP address and subnet mask of the sensor: At the prompt, type: set sensor ip Example: set sensor ip 192.168.2.12 255.255.255.0 Note: Specify an IP address using four octets separated by periods: X.X.X.X, where X is a number between 0 and 255, followed by a subnet mask in the same format. 8. If prompted, reboot the sensor: Type: reboot Note: The sensor can take up to five minutes to complete its reboot. 9. Ping the Manager from the sensor to determine if your configuration settings to this point have successfully established the sensor on the network: At the prompt, type: ping If the ping is successful, continue with the following steps. If not, type show to verify your configuration settings and check that the information is correct. 10. Set the shared secret key value for the sensor: At the prompt, type: set sensor sharedsecretkey. The sensor then prompts you to enter and, subsequently, confirm the shared secret key value. Note: This value is used to establish a trust relationship between the sensor and the Manager. The secret key value can be between 8 and 25 characters of any ASCII text. The shared key value is case-sensitive. Make sure the value matches the shared secret key value you provided in the Manager interface. 11. To verify the configuration information, type show. Check that all information is correct. 12. To exit the session, type exit.

  • 1
  • 2
  • 3
  • 4

Tip:
This screen is where you manage your sensor licenses by
adding and deleting licenses as necessary.
4.
Click
Sensors > Manage Sensors
, and then click
Add
.
Figure 12: Add the sensor
5.
Type information in the appropriate fields and click
Submit
.
Figure 13: Update the Manager with new sensor
STEP 3: Configure the sensor
Configure sensor information
Configure the sensor with the network information, a name, and the
shared secret key that the sensor uses to establish secure
communication with the Manager. Use the name and key values you
set in Step 2.
Tip:
The first time you configure a sensor, you must have physical
access to the sensor.
At any time during configuration, you can type a question mark (
?
) to
get help on the sensor command-line interface (CLI) commands. For
a list of all commands, type
commands
.
1.
Log on to the sensor using the terminal connected to the Console
port.
2.
At the prompt, log on using the default sensor username (
admin
)
and password (
admin123
).
Figure 14: Sensor CLI log on
3.
Optional, but recommended.
Change the sensor password:
At the prompt, type:
passwd
The sensor prompts you to enter the new password and prompts
you for the old password.
Note:
A password must contain between 8 and 25 characters, is
case-sensitive, and can consist of any alphanumeric character or
symbol.
4.
Set the name of the sensor:
Tip:
You can enter the setup command at the prompt and this will
automatically prompt you to provide the information shown in
items 4 through 7 and item 10. Or, you use the set command
instead. If you use the set command, you must manually enter the
complete command syntax as shown in items 4 through 7 and
item 10.
At the prompt, type:
set sensor name <WORD>
Example:
set sensor name HR_sensor1
Note:
The sensor name is a case-sensitive character string up to
25 characters. The string can include hyphens, underscores, and
periods, and must begin with a letter.
5.
If the sensor is not on the same network as the Manager, set the
address of the default gateway:
At the prompt, type:
set sensor gateway <A.B.C.D>
Example:
set sensor gateway 192.168.3.68
6.
Set the IP address of the Manager server:
At the prompt, type:
set manager ip <A.B.C.D>
Example:
set manager ip 192.168.2.8
7.
Set the IP address and subnet mask of the sensor:
At the prompt, type:
set sensor ip <A.B.C.D> <E.F.G.H>
Example:
set sensor ip 192.168.2.12 255.255.255.0
Note:
Specify an IP address using four octets separated by
periods: X.X.X.X, where X is a number between 0 and 255,
followed by a subnet mask in the same format.
8.
If prompted, reboot the sensor:
Type:
reboot
Note:
The sensor can take up to five minutes to complete its
reboot.
9.
Ping the Manager from the sensor to determine if your
configuration settings to this point have successfully established
the sensor on the network:
At the prompt, type:
ping <manager IP address>
If the ping is successful, continue with the following steps. If not,
type
show
to verify your configuration settings and check that the
information is correct.
10.
Set the shared secret key value for the sensor:
At the prompt, type:
set sensor sharedsecretkey
.
The sensor then prompts you to enter and, subsequently, confirm
the shared secret key value.
Note:
This value is used to establish a trust relationship between
the sensor and the Manager. The secret key value can be
between 8 and 25 characters of any ASCII text. The shared key
value is case-sensitive. Make sure the value matches the shared
secret key value you provided in the Manager interface.
11.
To verify the configuration information, type
show
. Check that all
information is correct.
12.
To exit the session, type
exit
.