Cisco FirePOWER ASA 5500 series Configuration Manual page 393

Chapter 22 Managing AIP SSM and CSC SSM
To transfer an image onto an intelligent SSM, perform the following steps:
Step 1 Create or modify a recovery configuration for the SSM. To do so, perform the following steps:
a. Determine if there is a recovery configuration for the SSM. To do so, use the show module
command with the recover keyword, as follows.
hostname# show module slot recover
where slot is the slot number occupied by the SSM.
If the recover keyword is not valid, a recovery configuration does not exist. The recover keyword
of the show module command is available only when a recovery configuration exists for the SSM.
Note
If there is a recovery configuration for the SSM, the adaptive security appliance displays it. Examine
the recovery configuration closely to ensure that it is correct, especially the Image URL field. The
following example show a recovery configuration for an SSM in slot 1.
hostname# show module 1 recover
Module 1 recover parameters. . .
Boot Recovery Image: Yes
Image URL:
Port IP Address:
Port Mask :
Gateway IP Address:
If you need to create or modify the recovery configuration, use the hw-module module recover
b.
command with the configure keyword, as follows:
hostname# hw-module module slot recover configure
where slot is the slot number occupied by the SSM.
Complete the prompts as applicable. If you are modifying a configuration, you can keep the
previously configured value by pressing Enter. The following example shows the prompts. For more
information about them, see the entry for the hw-module module recover command in the Cisco
Security Appliance Command Reference.
Image URL [tftp://0.0.0.0/]:
Port IP Address [0.0.0.0]:
VLAN ID [0]:
Gateway IP Address [0.0.0.0]:
Note
After you complete the prompts, the adaptive security appliance is ready to transfer to the SSM the
image that it finds at the URL you specified.
Step 2 Transfer the image from the TFTP server to the SSM and restart the SSM. To do so, use the hw-module
module recover command with the boot keyword, as follows.
hostname# hw-module module slot recover boot
where slot is the slot number occupied by the SSM.
OL-10088-01
When the adaptive security appliance operates in multiple context mode, the configure
keyword is available only in the system context.
tftp://10.21.18.1/ids-oldimg
10.1.2.10
255.255.255.0
10.1.2.254
Be sure the TFTP server you specify can transfer files up to 60 MB in size. Also, be sure the
TFTP server can connect to the management port IP address that you specify for the SSM.
Cisco Security Appliance Command Line Configuration Guide
Transferring an Image onto an SSM
22-15