Cisco Systems IPS4520K9 Network Router User Manual


 
D-22
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.1
OL-24002-01
Appendix D Upgrading, Downgrading, and Installing System Images
Installing System Images
To install the system image on the ASA 5500-X IPS SSP, follow these steps:
Step 1
Download the IPS system image file corresponding to your ASA platform to the tftp root directory of a
TFTP server that is accessible from your adaptive security appliance.
Note
Make sure you can access the TFTP server location from the network connected to the Ethernet
port of the adaptive security appliance.
Step 2
Log in to the adaptive security appliance.
Step 3
Enter enable mode.
asa> enable
Step 4
Copy the IPS image to the disk0 flash of the adaptive security appliance.
asa# copy tftp://192.0.2.0/directory/IPS-5545-K9-sys-1.1-a-7.1-3-E4.aip disk0:
Step 5
Image the ASA 5500-X IPS SSP.
asa# sw-module module ips recover configure image
disk0:/IPS-SSP_5545-K9-sys-1.1-a-7.1-3-E4.aip
Step 6
Execute the recovery. This transfers the image from the TFTP server to the ASA 5500-X IPS SSP and
restarts it.
asa# sw-module module ips recover boot
Step 7
Periodically check the recovery until it is complete.
asa# show module
Mod Card Type Model Serial No.
--- -------------------------------------------- ------------------ -----------
0 Cisco ASA 5545 Appliance with 8 GE ports, 1 ASA5545 ABC1234D56E
1 IPS 5545 Intrusion Protection System IPS5545 ABC1234D56E
Mod MAC Address Range Hw Version Fw Version Sw Version
--- --------------------------------- ------------ ------------ -------------
0 503d.e59c.6dc1 to 503d.e59c.6dca 1.0 8.6.1
ips 503d.e59c.6dcb to 503d.e59c.6dcb N/A N/A 7.1(3)E4
Mod SSM Application Name Status SSM Application Version
--- ------------------------------ ---------------- --------------------------
1 IPS Up 7.1(3)E4
Mod Status Data Plane Status Compatibility
--- ------------------ --------------------- -------------
0 Up Sys Not Applicable
1 Up Up
asa#
Note
The Status field in the output indicates the operational status of the ASA 5500-X IPS SSP. An
ASA 5500-X IPS SSP operating normally shows a status of “Up.” While the adaptive security
appliance transfers an application image to the ASA 5500-X IPS SSP, the Status field in the
output reads “Recover.” When the adaptive security appliance completes the image transfer and
restarts the ASA 5500-X IPS SSP, the newly transferred image is running.