Installing AIP-SSM [Cisco IPS 4200 Series Sensors]

Table Of Contents

Installing AIP-SSM

Specifications

Memory Specifications

Hardware and Software Requirements

Indicators

Installation and Removal Instructions

Installing AIP-SSM

Verifying the Status of AIP-SSM

Removing AIP-SSM

Installing AIP-SSM

This chapter describes how to install AIP-SSM. It contains the following sections:

•Specifications

•Memory Specifications

•Hardware and Software Requirements

•Indicators

•Installation and Removal Instructions

Specifications

Table 6-1 lists the specifications for AIP-SSM:

Table 6-1 IDSM-2 Specifications

Specification

Description

Dimensions (H x W x D)

1.70 x 6.80 x 11.00 inches

Weight

Minimum: 2.50 lb
Maximum: 3.00 lb¹

Operating temperature

+32° to +104°F (+0° to +40°C)

Nonoperating temperature

-40° to +167°F (-40° to +75°C)

Humidity

10% to 90%, noncondensing

¹2.70 lbs for 45 c heatsink, approximately 3.00 lbs for the 55c maximum

Memory Specifications

Table 6-2 lists the memory specifications for AIP-SSM.

Table 6-2 AIP-SSM Memory Specifications

Model

CPU

DRAM

AIP-SSM-10

2.0 GHz Celeron

1.0 GB

AIP-SSM-20

2.4 GHz Pentium 4

2.0 GB

Hardware and Software Requirements

AIP-SSM has the following hardware and software requirements:

•Cisco ASA 5500 series adaptive security appliance

–ASA 5510 (AIP-SSM-10)

–ASA 5520 (AIP-SSM-10 and AIP-SSM-20)

–ASA 5540 (AIP-SSM-20)

•Cisco Adaptive Security Appliance Software 7.0 or higher

•Cisco Intrusion Prevention System Software 5.0(2) or higher

•DES or 3DES-enabled

Indicators

Figure 6-1 shows the AIP-SSM indicators.

Figure 6-1 AIP-SSM Indicators

Table 6-3 describes the AIP-SSM indicators.

Table 6-3 AIP-SSM Indicators

LED

Color

State

Description

1

PWR

Green

On

The system has power.

2

STATUS

Green

Flashing

The system is booting.

Solid

The system has passed power-up diagnostics.

3

LINK/ACT

Green

Solid

There is Ethernet link.

Flashing

There is Ethernet activity.

4

SPEED

Green

Amber

100 MB

There is network activity.

1000 MB
(GigabitEthernet)

There is network activity.

Installation and Removal Instructions

This section describes how to install and remove AIP-SSM, and contains the following topics:

•Installing AIP-SSM

•Verifying the Status of AIP-SSM

•Removing AIP-SSM

Installing AIP-SSM

To install AIP-SSM, follow these steps:

Step 1 Power off ASA.

Step 2 Locate the grounding strap from the accessory kit and fasten it to your wrist so that it contacts your bare skin. Attach the other end to the chassis.

For more information, see Working in an ESD Environment.

Step 3 Remove the two screws at the left back end of the chassis, and remove the slot cover.

Step 4 Insert AIP-SSM through the slot opening.

Step 5 Attach the screws to secure AIP-SSM to the chassis.

Step 6 Power on ASA by pushing the power switch at the back of the chassis.

Step 7 Check the indicators.

If AIP-SSM is properly installed, the POWER indicator is solid green and the STATUS indicator is flashing green. You can also verify that AIP-SSM is online using the show module command. For more information, see Verifying the Status of AIP-SSM.

Step 8 Initialize AIP-SSM.

For the procedure, see Initializing the Sensor.

Step 9 Install the most recent Cisco IPS software.

See Obtaining Cisco IPS Software for the procedure.

Step 10 Configure AIP-SSM to receive IPS traffic.

For the procedure, refer to Sending Traffic to AIP-SSM.

For More Information

•For the procedure for using HTTPS to log in to IDM and ASDM, refer to Logging In to IDM.

•For the procedures for configuring intrusion prevention on your sensor, refer to the following documents:

–Installing and Using Cisco Intrusion Prevention System Device Manager 5.0

–Configuring the Cisco Intrusion Prevention System Sensor Using the Command Line Interface 5.0

Verifying the Status of AIP-SSM

You can use the show module 1 command to verify that AIP-SSM is up and running.

To verify the status of AIP-SSM, follow these steps:

Step 1 Log in to ASA.

Step 2 Verify the status of AIP-SSM:
asa# show module 1
Mod Card Type                                    Model              Serial No.
--- -------------------------------------------- ------------------ -----------
  1 ASA 5500 Series Security Services Module-20  ASA-SSM-20         P2B000005D0
Mod MAC Address Range                 Hw Version   Fw Version   Sw Version
--- --------------------------------- ------------ ------------ ---------------
  1 000b.fcf8.0144 to 000b.fcf8.0144  0.2          1.0(9)0      5.0(0.27)S129.0
Mod Status
--- ------------------
  1 Up
asa#
If the status reads Up, AIP-SSM has been properly installed.

The following values are valid for the Status field:

•Initializing—AIP-SSM is being detected and the control communication is being initialized by the system.

•Up—AIP-SSM has completed initialization by the system.

•Unresponsive—The system encountered an error communicating with AIP-SSM.

•Reloading—AIP-SSM is reloading.

•Shutting Down—AIP-SSM is shutting down.

•Down—AIP-SSM is shut down.

•Recover—AIP-SSM is attempting to download a recovery image.

Removing AIP-SSM

To remove AIP-SSM, follow these steps:

Step 1 Shut down AIP-SSM:
asa# hw-module module 1 shutdown
Shutdown module in slot 1? [confirm]
Step 2 Press Enter to confirm.

Step 3 Verify if AIP-SSM is down by checking the indicators.

Step 4 Power off ASA.

Step 5 Locate the grounding strap from the accessory kit and fasten it to your wrist so that it contacts your bare skin. Attach the other end to the chassis.

For more information, see Working in an ESD Environment.

Step 6 Remove the two screws at the left back end of the chassis, and remove the slot cover.

Step 7 Remove AIP-SSM and set it aside.

Step 8 If you need to replace the existing AIP-SSM, insert the new AIP-SSM through the slot opening.

Note Do not replace AIP-SSM with a different model. The ASA will not recognize it.

Step 9 Attach the screws to secure AIP-SSM to the chassis.

Step 10 Power on ASA.

Step 11 Reset AIP-SSM:
asa# hw-module module 1 reset
Reset module in slot 1? [confirm]
Step 12 Press Enter to confirm.

Step 13 Check the indicators to see if AIP-SSM is properly installed.

If AIP-SSM is properly installed, the POWER indicator is solid green and the STATUS indicator is flashing green. Or you can verify installation using the show module command. For the procedure, see Verifying the Status of AIP-SSM.