19-12
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter19 Configuring the ASA 5585-X IPS SSP
Health and Status Information
Use the following commands to reload, shut down, reset, recover the password, and recover the
ASA 5585-X IPS SSP directly from the adaptive security appliance:
•
hw-module module slot_number reload—This command reloads the sof tware on the
ASA 5585-X IPS SSP without doing a hardware reset. It is effective only when the module is in the
Up state.
•
hw-module module slot_number shutdown—This command shuts down the software on the
ASA 5585-X IPS SSP. It is effective only when the module is in Up state.
•
hw-module module slot_number reset—This command performs a hardware reset of the
ASA 5585-X IPS SSP. It is applicable when the module is in the Up/Down/Unresponsive/Recover
states.
•
hw-module module slot_number password-reset—This command restores the cisco CLI account
password on the ASA 5585-X IPS SSP to the default cisco.
•
hw-module module slot_number recover [boot | stop | configure]—The recover command
displays a set of interactive options for setting or changing the recovery parameters. To change the
parameter or keep the existing setting, press Enter.
–
hw-module module slot_number recover boot—This command initiates recovery of the
ASA 5585-X IPS SSP. It is applicable only when the module is in the Up state.
–
hw-module module slot_number recover stop—This command stops recovery of the
ASA 5585-X IPS SSP. It is applicable only when the module is in the Recover state.
Caution
If the ASA 5585-X IPS SSP recovery needs to be stopped, you must issue the hw-module module 1
recover stop command within 30 to 45 seconds after starting the recovery. Waiting any longer can lead
to unexpected consequences. For example, the module may co me up in the Unresponsive state.
–
hw-module module 1 recover configure—Use this command to configure parameters for the
ASA 5585-X IPS SSP recovery. The essential parameters are the IP address and recovery image
TFTP URL location.
Example
ips-ssp# hardware-module module 1 recover configure
Image URL [tftp://10.89.146.1/IPS-SSP_10-K9-sys-1.1-a-7.2-1-E4.img]:
Port IP Address [10.89.149.226]:
VLAN ID [0]:
Gateway IP Address [10.89.149.254]:
For More Information
For the procedure for recovering the ASA 5585-X IPS SSP system image, see Installing the System
Image for the ASA 5585-X IPS SSP, page 21-23.
Health and Status Information
To see the general health of the ASA 5585-X IPS SSP, use the show module 1 details command.
asa# show module 1 details
Getting details from the Service Module, please wait...
ASA 5585-X IPS Security Services Processor-20 with 8GE
Model: ASA5585-SSP-IPS20
Hardware version: 1.0
Serial Number: ABC1234DEFG
Firmware version: 2.0(1)3