Installing the AIP SSM
Note All IPS platforms allow ten concurrent CLI sessions.
This chapter describes how to install the AIP SSM. It contains the following sections:
•Specifications
•Memory Specifications
•Hardware and Software Requirements
•Indicators
•Installation and Removal Instructions
Specifications
Table 6-1 lists the specifications for the AIP SSM:
Table 6-1 AIP SSM Specifications
|
|
Dimensions (H x W x D) |
1.70 x 6.80 x 11.00 inches |
Weight |
Minimum: 2.50 lb Maximum: 3.00 lb1 |
Operating temperature |
+32° to +104°F (+0° to +40°C) |
Nonoperating temperature |
-40° to +167°F (-40° to +75°C) |
Humidity |
10% to 90%, noncondensing |
Memory Specifications
Table 6-2 lists the memory specifications for the AIP SSM.
Table 6-2 AIP SSM Memory Specifications
|
|
|
ASA-SSM-AIP-10-K9 |
2.0 GHz Celeron |
1.0 GB |
ASA-SSM-AIP-20-K9 |
2.4 GHz Pentium 4 |
2.0 GB |
Hardware and Software Requirements
The AIP SSM has the following hardware and software requirements:
•Cisco ASA 5500 series adaptive security appliance
–ASA 5510 (ASA-SSM-AIP-10-K9)
–ASA 5520 (ASA-SSM-AIP-10-K9 and ASA-SSM-AIP-20-K9)
–ASA 5540 (ASA-SSM-AIP-20-K9)
•Cisco Adaptive Security Appliance Software 7.0 or later
•Cisco Intrusion Prevention System Software 5.0(2) or later
•DES or 3DES-enabled
Indicators
Figure 6-1 shows the AIP SSM indicators.
Figure 6-1 AIP SSM Indicators
Table 6-3 describes the AIP SSM indicators.
Table 6-3 AIP SSM Indicators
|
|
|
|
|
|
PWR |
Green |
On |
The system has power. |
|
STATUS |
Green |
Flashing |
The system is booting. |
Solid |
The system has passed power-up diagnostics. |
|
LINK/ACT |
Green |
Solid |
There is Ethernet link. |
Flashing |
There is Ethernet activity. |
|
SPEED |
Green Amber |
100 MB |
There is network activity. |
1000 MB (GigabitEthernet) |
There is network activity. |
Installation and Removal Instructions
This section describes how to install and remove the AIP SSM, and contains the following topics:
•Installing the AIP SSM
•Verifying the Status of the AIP SSM
•Removing the AIP SSM
Installing the AIP SSM
To install the AIP SSM for the first time, follow these steps:
Step 1 Power off the adaptive security appliance.
Step 2 Locate the grounding strap from the accessory kit and fasten it to your wrist so that it contacts your bare skin. Attach the other end to the chassis.
Step 3 Remove the two screws at the left back end of the chassis, and remove the slot cover.
Note Store the slot cover in a safe place for future use. You must install slot covers on all empty slots. This prevents EMI, which can disrupt other equipment.
Step 4 Insert the AIP SSM through the slot opening.
Step 5 Attach the screws to secure the AIP SSM to the chassis.
Step 6 Power on the adaptive security appliance by pushing the power switch at the back of the chassis.
Step 7 Check the indicators. If the AIP SSM is properly installed, the POWER indicator is solid green and the STATUS indicator is flashing green. You can also verify that the AIP SSM is online using the show module 1 command.
Step 8 Initialize the AIP SSM.
Step 9 Install the most recent Cisco IPS software.
Step 10 Configure the AIP SSM to receive IPS traffic.
For More Information
•For more information about ESD, see Working in an ESD Environment.
•For the procedure for verifying that the AIP SSM is properly installed, see Verifying the Status of the AIP SSM.
•For the procedure for using the setup command to initialize the AIP SSM, see Initializing the Sensor.
•For the procedure for obtaining the latest Cisco IPS software, see Obtaining Cisco IPS Software.
•For the procedure for configuring the AIP SSM to receive IPS traffic, refer to Configuring the AIP SSM.
•For the procedure for using HTTPS to log in to IDM, refer to Logging In to IDM.
Verifying the Status of the AIP SSM
You can use the show module 1 command to verify that the AIP SSM is up and running.
The following values are valid for the Status field:
•Initializing
—The AIP SSM is being detected and the control communication is being initialized by the system.
•Up
—The AIP SSM has completed initialization by the system.
•Unresponsive
—The system encountered an error communicating with the AIP SSM.
•Reloading
—The AIP SSM is reloading.
•Shutting Down
—The AIP SSM is shutting down.
•Down
—The AIP SSM is shut down.
•Recover
—The AIP SSM is attempting to download a recovery image.
To verify the status of the AIP SSM, follow these steps:
Step 1 Log in to the adaptive security appliance.
Step 2 Verify the status of the AIP SSM:
Mod Card Type Model Serial No.
--- -------------------------------------------- ------------------ -----------
1 ASA 5500 Series Security Services Module-20 ASA-SSM-20 P2B000005D0
Mod MAC Address Range Hw Version Fw Version Sw Version
--- --------------------------------- ------------ ------------ ---------------
1 000b.fcf8.0144 to 000b.fcf8.0144 0.2 1.0(9)0 5.0(0.27)S129.0
If the status reads Up
, the AIP SSM has been properly installed.
Removing the AIP SSM
To remove the AIP SSM from the adaptive security appliance, follow these steps:
Step 1 Shut down the AIP SSM:
asa# hw-module module 1 shutdown
Shutdown module in slot 1? [confirm]
Step 2 Press Enter to confirm.
Step 3 Verify that the AIP SSM is shut down by checking the indicators.
Step 4 Power off the adaptive security appliance.
Step 5 Locate the grounding strap from the accessory kit and fasten it to your wrist so that it contacts your bare skin. Attach the other end to the chassis.
Step 6 Remove the two screws at the left back end of the chassis.
Step 7 Remove the AIP SSM and set it aside.
Note If you are not replacing the AIP SSM immediately, install the blank slot cover. Slot covers must cover all empty slots. This prevents EMI from disrupting other equipment.
Step 8 If you need to replace the existing the AIP SSM, insert the new AIP SSM through the slot opening.
Note Do not replace the AIP SSM with a different model. The the adaptive security appliance will not recognize it.
Step 9 Attach the screws to secure the AIP SSM to the chassis.
Step 10 Power on the adaptive security appliance.
Step 11 Reset the AIP SSM:
hostname# hw-module module 1 reset
Reset module in slot 1? [confirm]
Step 12 Press Enter to confirm.
Step 13 Check the indicators to see if the AIP SSM is properly installed. If the AIP SSM is properly installed, the POWER indicator is solid green and the STATUS indicator is flashing green. Or you can verify installation using the show module 1command.
For More Information
•For more information on ESD, see Working in an ESD Environment.
•For the procedure for verifying whether the AIP SSM is properly installed, see Verifying the Status of the AIP SSM.