Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual page 471

Appendix C Troubleshooting
Mgmt IP addr:
Mgmt web ports:
Mgmt TLS enabled:
asa#
The output shows that AIP-SSM is up. If the status reads
hw-module module 1 reset command:
asa# hw-module module 1 reset
The module in slot 1 should be shut down before
resetting it or loss of configuration may occur.
Reset module in slot 1? [confirm]
Reset issued for module in slot 1
asa(config)# show module
Mod Card Type
--- -------------------------------------------- ------------------ -----------
0 ASA 5520 Adaptive Security Appliance
1 ASA 5500 Series Security Services Module-10
Mod MAC Address Range
--- --------------------------------- ------------ ------------ ---------------
0 000b.fcf8.7bdc to 000b.fcf8.7be0
1 000b.fcf8.0176 to 000b.fcf8.0176
Mod Status
--- ------------------
0 Up Sys
1 Shutting Down
****************************************************
asa(config)# show module
Mod Card Type
--- -------------------------------------------- ------------------ -----------
0 ASA 5520 Adaptive Security Appliance
1 ASA 5500 Series Security Services Module-10
Mod MAC Address Range
--- --------------------------------- ------------ ------------ ---------------
0 000b.fcf8.7bdc to 000b.fcf8.7be0
1 000b.fcf8.0176 to 000b.fcf8.0176
Mod Status
--- ------------------
0 Up Sys
1 Up
asa(config)#
If you have problems with recovering AIP-SSM, use the debug module-boot command to see the output
as AIP-SSM boots. Make sure you have the correct IP address for the TFTP server and you have the
correct file on the TFTP server. Then use the hw-module module 1 recover command again to recover
AIP-SSM:
asa(config)# hw-module module 1 recover configure
Image URL [tftp://0.0.0.0/]: tftp://10.89.146.1/IPS-SSM-K9-sys-1.1-a-5.1-0.1.i$
Port IP Address [0.0.0.0]: 10.89.150.227
VLAN ID [0]:
Gateway IP Address [0.0.0.0]: 10.89.149.254
asa(config)# debug module-boot
debug module-boot
asa(config)# hw-module module 1 recover boot
The module in slot 1 will be recovered.
that device and attempt to download a new image for it.
78-16527-01
10.89.149.219
443
true
Hw Version
0.2
0.2
Hw Version
0.2
0.2
enabled at level 1
This may erase all configuration and all data on
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
Troubleshooting AIP-SSM
, you can reset AIP-SSM using the
Down
Model Serial No.
ASA5520 P2A00000014
AIP-SSM-10 P2A0000067U
Fw Version Sw Version
1.0(10)0 7.0(1)
1.0(10)0 5.1(0.1)S153.0
Model Serial No.
ASA5520 P2A00000014
AIP-SSM-10 P2A0000067U
Fw Version Sw Version
1.0(10)0 7.0(1)
1.0(10)0 5.1(0.1)S153.0
C-45