Filter
Top Products
20-12
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 20 Configuring the ASA 5585-X IPS SSP
Reloading, Shutting Down, Resetting, and Recovering the ASA 5585-X IPS SSP
Reloading, Shutting Down, Resetting, and Recovering the
ASA 5585-X IPS SSP
Note You can enter the hw-module commands from privileged EXEC mode or from global configuration
mode. You can enter the commands in single routed mode and single transparent mode. For adaptive
security appliances operating in multi-mode (routed or transparent multi-mode) you can only execute the
hw-module commands from the system context (not from administrator or user contexts).
Use the following commands to reload, shut down, reset, recover the password, and recover the
ASA 5585-X IPS SSP directly from the adaptive security appliance:
• hw-module module slot_number reload—This command reloads the software on the
ASA 5585-X IPS SSP without doing a hardware reset. It is effective only when the module is in the
Up state.
• hw-module module slot_number shutdown—This command shuts down the software on the
ASA 5585-X IPS SSP. It is effective only when the module is in Up state.
• hw-module module slot_number reset—This command performs a hardware reset of the
ASA 5585-X IPS SSP. It is applicable when the module is in the Up/Down/Unresponsive/Recover
states.
• hw-module module slot_number password-reset—This command restores the cisco CLI account
password on the ASA 5585-X IPS SSP to the default cisco.
• hw-module module slot_number recover [boot | stop | configure]—The recover command
displays a set of interactive options for setting or changing the recovery parameters. To change the
parameter or keep the existing setting, press Enter.
–
hw-module module slot_number recover boot—This command initiates recovery of the
ASA 5585-X IPS SSP. It is applicable only when the module is in the Up state.
–
hw-module module slot_number recover stop—This command stops recovery of the
ASA 5585-X IPS SSP. It is applicable only when the module is in the Recover state.
Caution If the ASA 5585-X IPS SSP recovery needs to be stopped, you must issue the hw-module module 1
recover stop command within 30 to 45 seconds after starting the recovery. Waiting any longer can lead
to unexpected consequences. For example, the module may come up in the Unresponsive state.
–
hw-module module 1 recover configure—Use this command to configure parameters for the
ASA 5585-X IPS SSP recovery. The essential parameters are the IP address and recovery image
TFTP URL location.
Example
ips-ssp# hardware-module module 1 recover configure
Image URL [tftp://10.89.146.1/IPS-SSP_10-K9-sys-1.1-a-7.1-1-E4.img]:
Port IP Address [10.89.149.226]:
VLAN ID [0]:
Gateway IP Address [10.89.149.254]:
For More Information
For the procedure for recovering the ASA 5585-X IPS SSP system image, see Installing the System
Image for the ASA 5585-X IPS SSP, page 22-32.