Forum Discussion
sol13392 Intrusion Detection Clone Pool
Based on configuration in SOL13392 need to add Pool member, which means it should have IP? I would like to check how clone pool works if IDS is using sensor port which do not have IP.
4 Replies
- Jake_Tan_131739
Nimbostratus
Also based on SOl article box do not support interface mirroring.
- nitass
Employee
I would like to check how clone pool works if IDS is using sensor port which do not have IP.
if i do not misremember, it is just used to resolve IDS' mac address.
- What_Lies_Bene1
Cirrostratus
That's correct Nitass. Jake, I'd recommend picking a dummy IP address and creating a static ARP entry for it so the F5 can resolve the MAC address.
- Messe
Nimbostratus
So what I am missing is what do you put as the MAC address? I am trying to do the same thing with a TAP that would normally off a span port on a switch.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com