CH A P T E R

Installing AIP-SSM
This chapter describes how to install AIP-SSM. It contains the following sections:

Specifications, page 7-1 Memory Specifications, page 7-1 Hardware and Software Requirements, page 7-2 Indicators, page 7-2 Installation and Removal Instructions, page 7-3

Specifications
Table 7-1 lists the specifications for AIP-SSM:
Table 7-1 AIP-SSM Specifications

Specification Dimensions (H x W x D) Weight Operating temperature Nonoperating temperature Humidity

Description 1.70 x 6.80 x 11.00 inches Minimum: 2.50 lb Maximum: 3.00 lb1 +32 to +104F (+0 to +40C) 40 to +167F (40 to +75C) 10% to 90%, noncondensing

1. 2.70 lbs for 45 c heatsink, approximately 3.00 lbs for the 55c maximum

Memory Specifications
Table 7-2 lists the memory specifications for AIP-SSM.
Table 7-2 AIP-SSM Memory Specifications

Model

CPU

DRAM 1.0 GB 2.0 GB

ASA-SSM-AIP-10-K9 2.0 GHz Celeron ASA-SSM-AIP-20-K9 2.4 GHz Pentium 4

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1 OL-8677-01

7-1

Chapter 7 Hardware and Software Requirements

Installing AIP-SSM

Hardware and Software Requirements

AIP-SSM has the following hardware and software requirements:

Cisco ASA 5500 series adaptive security appliance

ASA 5510 (ASA-SSM-AIP-10-K9 and ASA-SSM-AIP-20-K9) ASA 5520 (ASA-SSM-AIP-10-K9 and ASA-SSM-AIP-20-K9) ASA 5540 (ASA-SSM-AIP-20-K9)

Cisco Adaptive Security Appliance Software 7.0 or higher Cisco Intrusion Prevention System Software 5.0(2) or higher DES or 3DES-enabled

Indicators
Figure 7-1 shows the AIP-SSM indicators.
Figure 7-1 AIP-SSM Indicators

/A CT NK LI

SP

EE

Table 7-3 describes the AIP-SSM indicators.

Table 7-3 AIP-SSM Indicators

LED 1 2 3 4 PWR STATUS LINK/ACT SPEED

Color Green Green Green Green

State On Flashing Solid Solid Flashing 100 MB

Description The system has power. The system is booting. The system has passed power-up diagnostics. There is Ethernet link. There is Ethernet activity. There is network activity. There is network activity.

Amber 1000 MB (GigabitEthernet)

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1

7-2

148402

ST AT U

PW

OL-8677-01

Chapter 7

Installing AIP-SSM Installation and Removal Instructions

Installation and Removal Instructions

This section describes how to install and remove AIP-SSM, and contains the following topics:

Installing AIP-SSM, page 7-3 Verifying the Status of AIP-SSM, page 7-4 Removing AIP-SSM, page 7-5

Installing AIP-SSM
To install AIP-SSM, follow these steps:
Step 1 Step 2

Power off ASA. Locate the grounding strap from the accessory kit and fasten it to your wrist so that it contacts your bare skin. Attach the other end to the chassis. For more information, see Working in an ESD Environment, page 1-25. Remove the two screws at the left back end of the chassis, and remove the slot cover.

Step 3

U AT ST

S TIV AC

E VP

H AS FL

Step 4

Insert AIP-SSM through the slot opening.

SP

EE

D LIN

CT K/A

PW

TU STA

LINK SPD LIN K SPD 3 LINK 2 SPD LIN K SPD 1 0

FLASH

ER W PO

U AT ST

S T AC IV

E VP

H AS FL

Step 5 Step 6 Step 7

Attach the screws to secure AIP-SSM to the chassis. Power on ASA by pushing the power switch at the back of the chassis. Check the indicators. If AIP-SSM is properly installed, the POWER indicator is solid green and the STATUS indicator is flashing green. You can also verify that AIP-SSM is online using the show module command. For the procedure, see Verifying the Status of AIP-SSM, page 7-4.

Step 8

Initialize AIP-SSM. For the procedure, see Initializing the Sensor, page 10-2.

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1 OL-8677-01

143144

MGMT USB2 USB1

LINK SPD LIN K SPD 3 LINK 2 SPD LIN K SPD 1 0

FLASH

ER W PO

MGMT USB2 USB1

7-3

Chapter 7 Installation and Removal Instructions

Installing AIP-SSM

Step 9

Install the most recent Cisco IPS software. For the procedure, see Obtaining Cisco IPS Software, page 11-1. Configure AIP-SSM to receive IPS traffic. For the procedure, refer to Sending Traffic to AIP-SSM.

Step 10

For More Information

For the procedure for using HTTPS to log in to IDM and ASDM, refer to Logging In to IDM. For the procedures for configuring intrusion prevention on your sensor, refer to the following documents:
Installing and Using Cisco Intrusion Prevention System Device Manager 5.1 Configuring the Cisco Intrusion Prevention System Sensor Using the Command Line Interface

5.1

Verifying the Status of AIP-SSM

You can use the show module 1 command to verify that AIP-SSM is up and running. To verify the status of AIP-SSM, follow these steps:
Step 1 Step 2

Log in to ASA. Verify the status of AIP-SSM:

asa# show module 1 Mod Card Type Model Serial No. --- -------------------------------------------- ------------------ ----------1 ASA 5500 Series Security Services Module-20 ASA-SSM-20 P2B000005D0 Mod MAC Address Range Hw Version Fw Version Sw Version --- --------------------------------- ------------ ------------ --------------1 000b.fcf8.0144 to 000b.fcf8.0144 0.2 1.0(9)0 5.0(0.27)S129.0 Mod Status --- -----------------1 Up asa#

If the status reads Up, AIP-SSM has been properly installed. The following values are valid for the Status field:

InitializingAIP-SSM

is being detected and the control communication is being initialized by

the system.
UpAIP-SSM

has completed initialization by the system. system encountered an error communicating with AIP-SSM. is reloading. is shutting down.

UnresponsiveThe

ReloadingAIP-SSM

Shutting DownAIP-SSM

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1

7-4

OL-8677-01

Chapter 7

Installing AIP-SSM Installation and Removal Instructions

DownAIP-SSM

is shut down. is attempting to download a recovery image.

RecoverAIP-SSM

Removing AIP-SSM
To remove AIP-SSM, follow these steps:
Step 1

Shut down AIP-SSM:

asa# hw-module module 1 shutdown Shutdown module in slot 1? [confirm]

Step 2 Step 3 Step 4 Step 5

Press Enter to confirm. Verify if AIP-SSM is down by checking the indicators. Power off ASA. Locate the grounding strap from the accessory kit and fasten it to your wrist so that it contacts your bare skin. Attach the other end to the chassis. For more information, see Working in an ESD Environment, page 1-25. Remove the two screws at the left back end of the chassis, and remove the slot cover. Remove AIP-SSM and set it aside. If you need to replace the existing AIP-SSM, insert the new AIP-SSM through the slot opening.

Step 6 Step 7 Step 8

Note Step 9 Step 10 Step 11

Do not replace AIP-SSM with a different model. The ASA will not recognize it.

Attach the screws to secure AIP-SSM to the chassis. Power on ASA. Reset AIP-SSM:
asa# hw-module module 1 reset Reset module in slot 1? [confirm]

Step 12 Step 13

Press Enter to confirm. Check the indicators to see if AIP-SSM is properly installed. If AIP-SSM is properly installed, the POWER indicator is solid green and the STATUS indicator is flashing green. Or you can verify installation using the show module command. For the procedure, see Verifying the Status of AIP-SSM, page 7-4.

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1 OL-8677-01

7-5

Chapter 7 Installation and Removal Instructions

Installing AIP-SSM

Installing Cisco Intrusion Prevention System Appliances and Modules 5.1

7-6

OL-8677-01