Table Of Contents
Installing and Removing the IPS SSP
Installing the IPS SSP
Installing SFP/SFP+ Modules
Verifying the Status of the IPS SSP
Removing and Replacing the IPS SSP
Installing and Removing the IPS SSP
This chapter describes how to install and remove the IPS SSP in the ASA 5585-X, and how to verify it is online. It contains the following topics:
•
Installing the IPS SSP
•Installing SFP/SFP+ Modules
•Verifying the Status of the IPS SSP
•Removing and Replacing the IPS SSP
Note The IPS SSP does not require any cabling. If you have an IPS SSP, you can use the IPS SSP nonmanagement interfaces as additional network interfaces.
Installing the IPS SSP
The ASA 5585-X comes with a core SSP already installed (SSP-10, SSP-20, SSP-40, or SSP-60). You can install an optional IPS SSP (IPS SSP-10, IPS SSP-20, IPS SSP-40, or IPS SSP-60).
Note The IPS SSP must be at the same level as the SSP model; for example, if you have the ASA 5585-X with SSP-10, you can only install the IPS SSP-10.
The IPS SSP will not run without the core SSP installed. You must install the IPS SSP in the upper slot (slot 1) and the core SSP in the bottom slot (slot 0). You must power off the ASA 5585-X to remove and install SSPs. The SSPs are not hot-swappable.
To install the IPS SSP in the ASA 5585-X for the first time, follow these steps:
Step 1 Power off the ASA 5585-X.
Step 2 Remove the power cable from the ASA 5585-X.
Step 3 From the front panel of the ASA 5585-X, loosen the captive screws on the upper left and right of the slot tray (slot 1), and remove it. Store it in a safe place for future use.
Note You must install slot trays in all empty slots to maintain the proper air flow. This prevents EMI, which can disrupt other equipment.
Step 4 Install the IPS SSP by lining it up with the module slot making sure the ejection levers are extended.
1
|
IPS SSP
|
2
|
Ejection levers
|
Step 5 Slide the IPS SSP in to the slot until it is seated and push the ejection levers back in to place.
Step 6 Tighten the screws.
Step 7 Reconnect the power cable to the ASA 5585-X.
Step 8 Power on the ASA 5585-X.
Step 9 Verify that the PWR indicator on the front panel is green.
You can also verify that the IPS SSP is online using the show module 1 command.
Step 10 Initialize the IPS SSP.
Step 11 Configure the IPS SSP to receive IPS traffic.
For More Information
•For more information about ESD, see Preventing Electrostatic Discharge Damage.
•For the procedure for verifying that the IPS SSP is properly installed, see Verifying the Status of the IPS SSP.
•For the procedure for using the setup command to initialize the IPS SSP, see "Initializing the IPS SSP."
•For the procedure for configuring the IPS SSP to receive IPS traffic, refer to Configuring the IPS SSP.
•For detailed information about the ASA 5585-X, refer to Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide.
Installing SFP/SFP+ Modules
The IPS SSP-10 and IPS SSP-20 have two SFP/SFP+ ports. The IPS SSP-40 and IPS SSP-60 have four SFP/SFP+ ports.
If you are using the fiber ports, you need an SFP+ module for 10-Gigabit Ethernet (a license may be required) or an SFP module for 1-Gigabit Ethernet (SFP or SFP+ modules are not included).
Note The following SFP/SFP+ modules require ASA 8.2.5 or later: BLC-LH-SM, SFP-10G-LRM, SFP-10G-LR, SFP-H10GB-CU1M, SFP-H10GB-CU3M, and SFP-H10GB-CU5M.
To connect to the SFP/SFP+ port if you are using fiber ports, follow these steps:
Step 1 Install the SFP/SFP+ module.
Step 2 Connect one end of the LC cable to the SFP/SFP+.
Step 3 Connect the other end of the LC cable to a network device, such as a router or switch.
For More Information
For a table listing the supported SFP/SFP+ modules, see SFP/SFP+ Modules.
Verifying the Status of the IPS SSP
You can use the show module 1 command to verify that the IPS SSP is up and running.
The following values are valid for the Status field:
•Initializing—The IPS SSP is being detected and the control communication is being initialized by the system.
•Up—The IPS SSP has completed initialization by the system.
•Unresponsive—The system encountered an error communicating with the IPS SSP.
•Reloading—The IPS SSP is reloading.
•Shutting Down—The IPS SSP is shutting down.
•Down—The IPS SSP is shut down.
•Recover—The IPS SSP is attempting to download a recovery image.
To verify the status of the IPS SSP, follow these steps:
Step 1 Log in to the adaptive security appliance.
Step 2 Verify the status of the IPS SSP.
Mod Card Type Model Serial No.
--- -------------------------------------------- ------------------ -----------
1 ASA 5585-X IPS Security Services Processor-2 ASA5585-SSP-IPS20 ABC1234DEFG
Mod MAC Address Range Hw Version Fw Version Sw Version
--- --------------------------------- ------------ ------------ ---------------
1 0001.0001.0001 to 0001.0001.000c 1.0 2.0(7)0 7.1(1)E4
Mod SSM Application Name Status SSM Application Version
--- ------------------------------ ---------------- --------------------------
Mod Status Data Plane Status Compatibility
--- ------------------ --------------------- -------------
If the status reads Up, the IPS SSP has been properly installed.
Removing and Replacing the IPS SSP
To remove and replace the IPS SSP in the ASA 5585-X, follow these steps:
Step 1 Shut down the IPS SSP.
asa# hw-module module 1 shutdown
Shutdown module in slot 1? [confirm]
Step 2 Press Enter to confirm.
Step 3 Verify that the IPS SSP is shut down by checking the indicators.
Step 4 Power off the ASA 5585-X.
Step 5 Remove the power cable from the ASA 5585-X.
Step 6 From the front panel of the ASA 5585-X, loosen the captive screws on the upper left and right of the IPS SSP in slot 1.
Step 7 Grasp the ejection levers at the left and right bottom of the module slot and pull them out.
1
|
IPS SSP
|
2
|
Ejection levers
|
Step 8 Grasp the sides of the IPS SSP and pull it all the way out of the chassis and set it aside.
Note If you are not replacing the IPS SSP immediately, install the blank slot tray. You must install slot trays in all empty slots to maintain the proper air flow. This prevents EMI, which can disrupt other equipment.
Step 9 If you are replacing the IPS SSP, install it by lining it up with the module slot making sure the ejection levers are extended.
1
|
IPS SSP
|
2
|
Ejection levers
|
Note The IPS SSP must be at the same level as the SSP model; for example, if you have the ASA 5585-X SSP-10, you can only install the IPS SSP-10.
Step 10 Slide the IPS SSP in to the slot until it is seated, and push the ejection levers back in to place
Step 11 Replace the screws.
Step 12 Reconnect the power cable to the ASA 5585-X.
Step 13 Power on the ASA 5585-X.
Step 14 Verify that the PWR indicator on the front panel is green.
You can also verify that the IPS SSP is online using the show module 1 command.
For More Information
•For the procedure for using the show module 1 command, see Verifying the Status of the IPS SSP.
•For detailed information about the ASA 5585-X, refer to Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide.
Feedback
