HP-UX Host Intrusion Detection System Version 4.1 Administrator's Guide

6. Add your interface address selected in Step 2 after the equals sign. For example,
change:
INTERFACE=
to
INTERFACE=1.2.3.4
7. Save the file with your modifications.
8. If the System Manager is running, stop and restart it.
9. On each agent host, log in as ids, as follows:
$ su - ids
10. Edit the agent configuration file, as follows:
$ vi /etc/opt/ids/ids.cf
11. Locate the REMOTEHOST parameter in the [RemoteSA] section. For more
information, see ids.cf(5).
12. Add your interface address (IP address or host name) selected in Step 2. For
example, change:
REMOTEHOST
to
REMOTEHOST 1.2.3.4
NOTE: The REMOTEHOST parameter is overridden when you import the certificate
bundle with IDS_importAgentKeys.
13. Save the file with your modifications.
14. If the agent is running, force it to reread its configuration file, as described in
“Forcing Active Agent to Reread Configuration File” (page 239).
Changing the IP Address of an Administration System
If the IP addresses of the administration systems need to be changed, you must complete
the following steps to ensure that HIDS continues to run smoothly:
• Check the REMOTEHOST entry in the ids.cf file located on the agent systems. If
the REMOTEHOST entry refers to the hostname, no modifications are required.
However, if the REMOTEHOST entry refers to the IP address, then you must update
the entry to reflect the new IP address.
Configuring a Multihomed Administration System 45