1
22.1 Legacy Series / Re: vlan issues - in combination with IPS (IDS works)
« on: February 15, 2022, 08:00:05 pm »
I have a quite similar setup:
I have no VLAN on the WAN side.
On LAN side there is a trunk with several VLANs defined. I also enabled the physical interface with no config and promiscuous mode enabled. In IPS settings only the physical interface is selected. Promiscuous mode is disabled.
After enabling IPS the network connections are interrupted when the suricata log say: all 1 packet processing threads, 4 management threads initialized, engine started.
I have no VLAN on the WAN side.
On LAN side there is a trunk with several VLANs defined. I also enabled the physical interface with no config and promiscuous mode enabled. In IPS settings only the physical interface is selected. Promiscuous mode is disabled.
After enabling IPS the network connections are interrupted when the suricata log say: all 1 packet processing threads, 4 management threads initialized, engine started.