1.拓扑图：
2.接口配置：
R1(config)#int f0/0
R1(config-if)#ip add 10.1.1.1 255.255.255.0
R1(config-if)#no sh
R2(config)#int f0/0
R2(config-if)#ip add 10.1.1.2 255.255.255.0
R2(config-if)#no sh
R3(config)#monitor session 1 source interface f0/1 both
R3(config)#monitor session 1 destination interface f0/15
3.IPS配置：
A.确认g0/1接口已经enabled
B.将g0/1关联到virtual sensor
4.测试：
A.在R2上连续ping R1
R2#ping 10.1.1.1 repeat 100
Type escape sequence to abort.
Sending 100, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:
.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 99 percent (99/100), round-trip min/avg/max = 8/25/84 ms
R2#
B.在IPS上能看到攻击事件
本文转自 碧云天 51CTO博客，原文链接：http://blog.51cto.com/333234/880625，如需转载请自行联系原作者
