Installing AIP SSM
Note The number of concurrent CLI sessions is limited based on the platform. IDS 4215 and NM-CIDS are limited to three concurrent CLI sessions. All other platforms allow ten concurrent sessions.
This chapter describes how to install AIP SSM. It contains the following sections:
•Specifications
•Memory Specifications
•Hardware and Software Requirements
•Indicators
•Installation and Removal Instructions
Specifications
Table 8-1 lists the specifications for AIP SSM.
Table 8-1 AIP SSM Specifications
|
|
Dimensions (H x W x D) |
1.70 x 6.80 x 11.00 inches |
Weight (SSM-10 and SSM-20) |
Minimum: 2.50 lb Maximum: 3.00 lb1 |
Weight (SSM-40) |
2.57 lb (1169 g) |
Temperature |
Operating +32° to +104°F (+0° to +40°C) Nonoperating -13 to 158ºF (-25 to 70ºC) |
Shock |
Operating 1.14 m/sec (45 in./sec) ½ sine input Nonoperating 30 G |
Humidity |
5% to 95%, noncondensing |
Altitude |
Operating 0 to 9840 ft (3000 m)2 Nonoperating 0 to 15,000 ft (4570 m) |
Vibration |
0.41 Grms2 (3 to 500 Hz) random input |
Memory Specifications
Table 8-2 lists the memory specifications for AIP SSM.
Table 8-2 AIP SSM Memory Specifications
|
|
|
ASA-SSM-AIP-10-K9 |
2.0 GHz Celeron |
1.0 GB |
ASA-SSM-AIP-20-K9 |
2.4 GHz Pentium 4 |
2.0 GB |
ASA-SSM-AIP-40-K9 |
2.0 GHz Intel Xeon LV |
4.0 GB |
Hardware and Software Requirements
AIP SSM has the following hardware and software requirements:
•Cisco ASA 5500 series adaptive security appliance
–ASA 5510 (ASA-SSM-AIP-10-K9)
–ASA 5520 (ASA-SSM-AIP-10-K9 and ASA-SSM-AIP-20-K9, and ASA-SSM-AIP-40-K9)
–ASA 5540 (ASA-SSM-AIP-20-K9 and ASA-SSM-AIP-40-K9)
•Cisco Adaptive Security Appliance Software
–7.0 or later (ASA-SSM-AIP-10-K9 and ASA-SSM-AIP-20-K9)
–8.0.3.6 or later (ASA-SSM-AIP-40-K9)
•Cisco Intrusion Prevention System Software
–5.0(2) or later (ASA-SSM-AIP-10-K9 and ASA-SSM-AIP-20-K9)
–6.0(4) or later (ASA-SSM-AIP-40-K9)
•DES or 3DES-enabled
Indicators
Figure 8-1 shows the AIP SSM-10 and AIP SSM-20 indicators.
Figure 8-1 AIP SSM-10 and AIP SSM-20 Indicators
Table 8-3 describes the AIP SSM-10 and AIP SSM-20 indicators.
Table 8-3 AIP SSM-10 and AIP SSM-20 Indicators
|
|
|
|
|
|
PWR |
Green |
On |
The system has power. |
|
STATUS |
Green |
Flashing Solid |
The system is booting. The system has passed power-up diagnostics. |
|
LINK/ACT |
Green |
Solid Flashing |
There is Ethernet link. There is Ethernet activity. |
|
SPEED |
Green Amber |
100 MB 1000 MB (GigabitEthernet) |
There is network activity. There is network activity. |
Figure 8-2 shows the AIP SSM-40 indicators.
Figure 8-2 AIP SSM-40 Indicators
Table 8-4 describes the AIP SSM-40 indicators.
Table 8-4 AIP SSM-40 Indicators
|
|
|
|
|
|
LINK |
Green |
Solid Flashing |
There is Ethernet link. There is Ethernet activity. |
|
SPEED |
Green Amber |
100 MB 1000 MB (GigabitEthernet) |
There is network activity. There is network activity. |
|
STATUS |
Green |
Flashing Solid |
The system is booting. The system has passed power-up diagnostics. |
|
PWR |
Green |
On |
The system has power. |
Installation and Removal Instructions
This section describes how to install and remove AIP SSM, and contains the following topics:
•Installing AIP SSM
•Verifying the Status of AIP SSM
•Removing AIP SSM
Installing AIP SSM
To install AIP SSM, follow these steps:
Step 1 Power off the adaptive security appliance.
Step 2 Locate the grounding strap from the accessory kit and fasten it to your wrist so that it contacts your bare skin. Attach the other end to the chassis.
Step 3 Remove the two screws at the left back end of the chassis, and remove the slot cover.
Step 4 Insert AIP SSM through the slot opening.
Step 5 Attach the screws to secure AIP SSM to the chassis.
Step 6 Power on the adaptive security appliance by pushing the power switch at the back of the chassis.
Step 7 Check the indicators.
If AIP SSM is properly installed, the POWER indicator is solid green and the STATUS indicator is flashing green. You can also verify that AIP SSM is online using the show module command.
Step 8 Initialize AIP SSM.
Step 9 Install the most recent Cisco IPS software.
Step 10 Configure AIP SSM to receive IPS traffic.
For More Information
•For more information on working in ESD-controlled environments, see Working in an ESD Environment.
•For the procedure for verifying whether AIP SSM is properly installed, see Verifying the Status of AIP SSM.
•For the procedure for using the setup command to initialize AIP SSM, see Initializing AIP SSM.
•For the procedure on how to obtain the latest IPS software, see Obtaining Cisco IPS Software.
•For the procedure for configuring AIP-SSN to receive IPS traffic, refer to Configuring AIP SSM.
•For the procedure for using HTTPS to log in to IDM, refer to Logging In to IDM.
•For the procedures for configuring intrusion prevention on your sensor, refer to the following documents:
–Installing and Using Cisco Intrusion Prevention System Device Manager 6.0
–Configuring the Cisco Intrusion Prevention System Sensor Using the Command Line Interface 6.0
Verifying the Status of AIP SSM
You can use the show module 1 command to verify that AIP SSM is up and running.
To verify the status of AIP SSM, follow these steps:
Step 1 Log in to the adaptive security appliance.
Step 2 Verify the status of AIP SSM:
Mod Card Type Model Serial No.
--- -------------------------------------------- ------------------ -----------
1 ASA 5500 Series Security Services Module-20 ASA-SSM-20 P2B000005D0
Mod MAC Address Range Hw Version Fw Version Sw Version
--- --------------------------------- ------------ ------------ ---------------
1 000b.fcf8.0144 to 000b.fcf8.0144 0.2 1.0(9)0 5.0(0.27)S129.0
If the status reads Up
, AIP SSM has been properly installed.
The following values are valid for the Status field:
•Initializing
—AIP SSM is being detected and the control communication is being initialized by the system.
•Up
—AIP SSM has completed initialization by the system.
•Unresponsive
—The system encountered an error communicating with AIP SSM.
•Reloading
—AIP SSM is reloading.
•Shutting Down
—AIP SSM is shutting down.
•Down
—AIP SSM is shut down.
•Recover
—AIP SSM is attempting to download a recovery image.
Removing AIP SSM
To remove AIP SSM, follow these steps:
Step 1 Shut down AIP SSM:
asa# hw-module module 1 shutdown
Shutdown module in slot 1? [confirm]
Step 2 Press Enter to confirm.
Step 3 Verify if AIP SSM is down by checking the indicators.
Step 4 Power off the adaptive security appliance.
Step 5 Locate the grounding strap from the accessory kit and fasten it to your wrist so that it contacts your bare skin. Attach the other end to the chassis.
Step 6 Remove the two screws at the left back end of the chassis, and remove the slot cover.
Step 7 Remove AIP SSM and set it aside.
Step 8 If you need to replace the existing AIP SSM, insert the new AIP SSM through the slot opening.
Note Do not replace AIP SSM with a different model. The the adaptive security appliance will not recognize it.
Step 9 Attach the screws to secure AIP SSM to the chassis.
Step 10 Power on the adaptive security appliance.
Step 11 Reset AIP SSM:
hostname# hw-module module 1 reset
Reset module in slot 1? [confirm]
Step 12 Press Enter to confirm.
Step 13 Check the indicators to see if AIP SSM is properly installed.
If AIP SSM is properly installed, the POWER indicator is solid green and the STATUS indicator is flashing green. Or you can verify installation using the show module command.
For More Information
•For more information on working in ESD-controlled environments, see Working in an ESD Environment.
•For the procedure for verifying whether AIP SSM is properly installed, see Verifying the Status of AIP SSM.