Cisco Systems IPS 7.1 Home Security System User Manual


  Open as PDF
of 1042
 
22-31
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 22 Upgrading, Downgrading, and Installing System Images
Installing System Images
Installing the System Image for the ASA 5500-X IPS SSP
Note Be sure the TFTP server that you specify can transfer files up to 60 MB in size.
Note The CLI output is an example of what your configuration may look like. It will not match exactly due to
the optional setup choices, sensor model, and IPS 7.1 version you have installed.
To install the system image on the ASA 5500-X IPS SSP, follow these steps:
Step 1 Download the IPS system image file corresponding to your ASA platform to the tftp root directory of a
TFTP server that is accessible from your adaptive security appliance.
Note Make sure you can access the TFTP server location from the network connected to the Ethernet
port of the adaptive security appliance.
Step 2 Log in to the adaptive security appliance.
Step 3 Enter enable mode.
asa> enable
Step 4 Copy the IPS image to the disk0 flash of the adaptive security appliance.
asa# copy tftp://192.0.2.0/directory/IPS-5545-K9-sys-1.1-a-7.1-3-E4.aip disk0:
Step 5 Image the ASA 5500-X IPS SSP.
asa# sw-module module ips recover configure image
disk0:/IPS-SSP_5545-K9-sys-1.1-a-7.1-3-E4.aip
Step 6 Execute the recovery. This transfers the image from the TFTP server to the ASA 5500-X IPS SSP and
restarts it.
asa# sw-module module ips recover boot
Step 7 Periodically check the recovery until it is complete.
asa# show module
Mod Card Type Model Serial No.
--- -------------------------------------------- ------------------ -----------
0 Cisco ASA 5545 Appliance with 8 GE ports, 1 ASA5545 ABC1234D56E
1 IPS 5545 Intrusion Protection System IPS5545 ABC1234D56E
Mod MAC Address Range Hw Version Fw Version Sw Version
--- --------------------------------- ------------ ------------ -------------
0 503d.e59c.6dc1 to 503d.e59c.6dca 1.0 8.6.1
ips 503d.e59c.6dcb to 503d.e59c.6dcb N/A N/A 7.1(3)E4
Mod SSM Application Name Status SSM Application Version
--- ------------------------------ ---------------- --------------------------
1 IPS Up 7.1(3)E4
Mod Status Data Plane Status Compatibility
--- ------------------ --------------------- -------------
0 Up Sys Not Applicable