Connectrix B-Series: How to configure the MAPS
Summary: HOW TO configure the MAPS.
Instructions
The MAPS is a little complex and this guide instruct you how to configure the MAPS and make it easier.
In the following section, we discuss the email configuration and then how to configure the user-defined policy.
Additional Information
Prerequisite: You should have a working email server
MAPS Email Configuration
Follow the below guide to set up an email server:
https://www.tecmint.com/setup-postfix-mail-server-in-ubuntu-debian/
The MAPS configuration is easier and complete the following steps:
-
Use "dnsconfig" to set the email server name and IP address.
root> dnsconfig Enter option 1 Display Domain Name Service (DNS) configuration 2 Set DNS configuration 3 Remove DNS configuration 4 Quit Select an item: (1..4) [4] 1 Domain Name Server Configuration Information ____________________________________________ Domain Name= mail.xman Name Server IP Address = 10.32.234.158 Name Server IP Address = 0.0.0.0 Enter option 1 Display Domain Name Service (DNS) configuration 2 Set DNS configuration 3 Remove DNS configuration 4 Quit Select an item: (1..4) [4]
-
Use below command to configure the mail recipient
mapsConfig --emailcfg -address xxxx.xxxx@dell.com
-
Test the email
root> mapsConfig --testmail MAPS test welcome mail sent successfully root>.
Upon the above three steps completion, you should receive a test mail "MAPS Welcome mail" from the switch.
How to Create a user-defined Policy
We create a security policy to monitor the login violation.
-
Create a rule
mapsrule --create xman_ssh -group SWITCH -monitor SEC_LV -op ge -value 1-timebase min -qt 1 -unit min-action email
-
Create a new policy
mapspolicy --create xman_policy_ssh
-
Add the rule to the policy
mapspolicy --addrule xman_policy_ssh -rulename xman_ssh
-
Enable this policy
mapsconfig --enable xman_policy_ssh