Reloading, Shutting Down, Resetting, And Recovering Aip-Ssm - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Chapter 14 Configuring AIP-SSM
The following example diverts all IP traffic to AIP-SSM in promiscuous mode, and blocks all IP traffic
should AIP-SSM fail for any reason:
asa(config)# access-list IPS permit ip any any
asa(config)# class-map my-ips-class
asa(config-cmap)# match access-list IPS
asa(config-cmap)# policy-map my-ids-policy
asa(config-pmap)# class my-ips-class
asa(config-pmap-c)# ips promiscuous fail-close
asa(config-pmap-c)# service-policy my-ids-policy global

Reloading, Shutting Down, Resetting, and Recovering AIP-SSM

Use the following commands to reload, shut down, reset, and recover AIP-SSM directly from ASA:
You can enter the hw-module commands from privileged EXEC mode or from global configuration
Note
mode. You can enter the commands in single routed mode and single transparent mode. For adaptive
security devices operating in multi-mode (routed or transparent multi-mode) you can only execute the
hw-module commands from the system context (not from administrator or user contexts).
•
•
•
•
If AIP-SSM recovery needs to be stopped, you must issue the hw-module module 1 recover stop
Caution
command within 30 to 45 seconds after starting AIP-SSM recovery. Waiting any longer can lead to
unexpected consequences, for example, AIP-SSM may come up in the Unresponsive state.
78-16527-01
hw-module module 1 reload
This command reloads the software on AIP-SSM without doing a hardware reset. It is effective only
when AIP-SSM is in the Up state.
hw-module module 1 shutdown
This command shuts down the software on AIP-SSM. It is effective only when AIP-SSM is in Up
state.
hw-module module 1 reset
This command performs a hardware reset of AIP-SSM. It is applicable when the card is in the
Up/Down/Unresponsive/Recover states.
hw-module module 1 recover [boot | stop | configure]
The recover command displays a set of interactive options for setting or changing the recovery
parameters. You can change the parameter or keep the existing setting by pressing Enter.
For the procedure for recovering AIP-SSM, see
– hw-module module 1 recover boot
This command initiates recovery of AIP-SSM. It is applicable only when AIP-SSM is in the Up
state.
– hw-module module 1 recover stop
This command stops recovery of AIP-SSM. It is applicable only when AIP-SSM is in the
Recover state.
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
Reloading, Shutting Down, Resetting, and Recovering AIP-SSM
Installing the AIP-SSM System Image, page 17-36.
14-5