Ian,
Is the signature package the same as the one used in the Solutions? I have seen instances where the signature is listed when you do show ip ips signatures but I have been unable to edit the signature, so I was thinking the same thing. But it should work in this instance if you are using the same package as we are for the solution guide. Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Technical Instructor - IPexpert, Inc. Mailto: [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Classroom and Self-Study Cisco CCNA (R&S, Voice & Security), CCNP, CCVP, CCSP and CCIE (R&S, Voice, Security & Service Provider) Certification Training with locations throughout the United States, Europe and Australia. Be sure to check out our online communities at www.ipexpert.com/communities and our public website at www.ipexpert.com From: [email protected] [mailto:[email protected]] On Behalf Of Ian Castleman Sent: Monday, December 28, 2009 4:12 PM To: [email protected] Subject: [OSL | CCIE_Security] LAB 3A 3.16 sig 2152 Hi All, I've enabled as per PG and see the ICMP flood category enabled sh ip ips category dos icmp_floods co Category dos icmp_floods: Retire: False Enable: True Alert I can even see sig 2152.0 as being in that category but I can't for the life of me tune it under ip ips signature-definition, it always comes back with Unable to locate Sig2152:0 and nothing I do seems to trigger the signature either. I'm guessing its probably a problem with the .pkg file not having the signature in properly but I just want to make sure I'm not misunderstanding something... -- Regards, Ian Castleman PS FYI Tyson, the diagram for this lab has VLAN 5 labeled as V9
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
