18-12
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter18 Configuring the ASA 5500-X IPS SSP
Health and Status Information
Use the following commands to reload, shut down, reset, recover the password, and recover the
ASA 5500-X IPS SSP directly from the adaptive security appliance:
•
sw-module module ips reload—This command reloads the software on the ASA 5500-X IPS SSP
without doing a hardware reset. It is effective only when the module is in the Up state.
•
sw-module module ips shutdown—This command shuts down the software on the
ASA 5500-X IPS SSP. It is effective only when the module is in Up state.
•
sw-module module ips reset—This command performs a hardware reset of the
ASA 5500-X IPS SSP. It is applicable when the module is in the Up/Down/Unresponsive/Recover
states.
•
sw-module module ips password-reset—This command restores the cisco CLI account password
on the ASA 5500-X IPS SSP to the default cisco.
•
sw-module module ips recover image disk0:/image name—This command starts the reimage
process by setting the image location and name. You must first copy the IPS image to the ASA to
disk0:/.
•
sw-module module ips recover boot—This command reimages the ASA 5500-X IPS SSP. It is
applicable only when the module is in the Up state.
•
sw-module module ips recover stop—This command stops the reimage of the ASA 5500-X IPS
SSP. It is applicable only when the module is in the Recover state.
Caution
If the ASA 5500-X IPS SSP recovery needs to be stopped, you must issue the sw-module module ips
recover stop command within 30 to 45 seconds after starting the recovery. Waiting any longer can lead
to unexpected consequences. For example, the module may co me up in the Unresponsive state.
–
sw-module module ips recover configure—Use this command to configure parameters for the
ASA 5500-X IPS SSP recovery. The essential parameters are the IP address and recovery image
TFTP URL location.
Example
asa-ips# sw-module module ips recover configure image
disk0:/IPS-SSP_5555-K9-sys-1.1-a-7.2-1-E4.aip
Image URL [tftp://192.0.2.1/IPS-5545-K9-sys-1.1-a-7.2-1-E4.aip]:
Port IP Address [192.0.2.226]:
VLAN ID [0]:
Gateway IP Address [192.0.2.254]:
For More Information
For the procedure for recovering the ASA 5500-X IPS SSP system image, see Installing the System
Image for the ASA 5500-X IPS SSP, page 21-22.
Health and Status Information
To see the general health of the ASA 5500-X IPS SSP, use the show module ips details command.
asa# show module ips details
Getting details from the Service Module, please wait...
Card Type: IPS 5555 Intrusion Prevention System
Model: IPS5555
Hardware version: N/A
Serial Number: FCH1504V0CW