Ничего не могу понять...мучаюсь уже 2-й день...Подскажите, что не так?

Запустил setup, как написано в мануале, IPS сам сделал конфиг, пытаюсь зайти на его IDM - ниче не выходит. Причем с самого IPS я свой комп пингую, а вот с компа IPS - нет.

Вот такой конфиг сделала циска (все как в мануале):

! Version 6.0(4)
! Host:                                        
!     Realm Keys          key1.0                
! Signature Definition:                        
!     Signature Update    S317.0   2008-02-13  
!     Virus Update        V1.2     2005-11-24  
! ------------------------------
service interface
exit
! ------------------------------
service authentication
exit
! ------------------------------
service event-action-rules rules0
exit
! ------------------------------
service host
network-settings
host-ip 10.1.9.201/24,10.1.9.1
host-name IPS
telnet-option enabled
exit    
time-zone-settings
offset 0
standard-time-zone-name UTC
exit
exit
! ------------------------------
service logger
exit
! ------------------------------
service network-access
exit
! ------------------------------
service notification
exit
! ------------------------------
service signature-definition sig0
exit
! ------------------------------
service ssh-known-hosts
exit
! ------------------------------
service trusted-certificates
exit
! ------------------------------
service web-server
exit
! ------------------------------
service anomaly-detection ad0
exit
! ------------------------------
service external-product-interface
exit
! ------------------------------
service analysis-engine
exit

• Не могу подсоединиться к IPS по https,Avanty, 14:41 , 28-Янв-09

Дело было в access-list.

Необходимо при диалоге, который спрашивает IPS (когда команду setup задаешь), исправить acl.

Вот что пишут:
Step 10 Enter yes to modify the network access list.
a. If you want to delete an entry, enter the number of the entry and press Enter, or press Enter to get
to the Permit line.
b. Enter the IP address and netmask of the network you want to add to the access list.
The IP network interface is in the form of IP Address/Netmask: X.X.X.X/nn, where X.X.X.X specifies
the network IP address as a 32-bit address written as 4 octets separated by periods and nn specifies
the number of bits in the netmask for that network.
For example, 10.0.0.0/8 permits all IP addresses on the 10.0.0.0 network (10.0.0.0-10.255.255.255)
and 10.1.1.0/24 permits only the IP addresses on the 10.1.1.0 subnet (10.1.1.0-10.1.1.255).
If you want to permit access to a single IP address than the entire network, use a 32-bit netmask. For
example, 10.1.1.1/32 permits just the 10.1.1.1 address.
c. Repeat Step b until you have added all networks that you want to add to the access list.
d. Press Enter at a blank permit line to proceed to the next step.