Filter
Top Products
C-61
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Appendix C Troubleshooting
Troubleshooting the ASA 5500 AIP SSM
Troubleshooting the ASA 5500 AIP SSM
Tip Before troubleshooting the ASA 5500 AIP SSM, check the Caveats section of the Readme for the
software version you have installed on your sensor to see if you are dealing with a known issue.
The following section contains commands that are specific for troubleshooting the ASA 5500 AIP SSM:
• Health and Status Information, page C-61
• Failover Scenarios, page C-63
• The ASA 5500 AIP SSM and the Data Plane, page C-64
• The ASA 5500 AIP SSM and the Normalizer Engine, page C-64
• The ASA 5500 AIP SSM and Jumbo Packet Frame Size, page C-65
• The ASA 5500 AIP SSM and Jumbo Packets, page C-65
• TCP Reset Differences Between IPS Appliances and ASA IPS Modules, page C-65
• IPS Reloading Messages, page C-66
Health and Status Information
To see the general health of the ASA 5500 AIP SSM, use the show module 1 details command:
asa# show module 1 details
Getting details from the Service Module, please wait...
ASA 5500 Series Security Services Module-20
Model: ASA-SSM-20
Hardware version: 0.2
Serial Number: P2B000005D0
Firmware version: 1.0(10)0
Software version: 5.1(0.1)S153.0
Status: Up
Mgmt IP addr: 192.0.2.0
Mgmt web ports: 443
Mgmt TLS enabled: true
asa#
The output shows that the ASA 5500 AIP SSM is up. If the status reads Down, you can reset the module
using the hw-module module 1 reset command:
asa# hw-module module 1 reset
The module in slot 1 should be shut down before
resetting it or loss of configuration may occur.
Reset module in slot 1? [confirm]
Reset issued for module in slot 1
asa(config)# show module
Mod Card Type Model Serial No.
--- -------------------------------------------- ------------------ -----------
0 ASA 5520 Adaptive Security Appliance ASA5520 P2A00000014
1 ASA 5500 Series Security Services Module-10 ASA-SSM-10 P2A0000067U
Mod MAC Address Range Hw Version Fw Version Sw Version
--- --------------------------------- ------------ ------------ ---------------
0 000b.fcf8.7bdc to 000b.fcf8.7be0 0.2 1.0(10)0 7.0(4)
1 000b.fcf8.0176 to 000b.fcf8.0176 0.2 1.0(10)0 5.1(0.1)S153.0