Filter
Top Products
E-65
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.1
OL-24002-01
Appendix E Troubleshooting
Troubleshooting the ASA 5500-X IPS SSP
The output shows that the ASA 5500-X IPS SSP is up. If the status reads
Down
, you can reset it using the
sw-module module 1 reset command.
If you have problems with reimaging the ASA 5500-X IPS SSP, use the debug module-boot command
to see the output as it boots. Make sure you have the correct IP address for the TFTP server and you have
the correct file on the TFTP server. Then use the sw-module module ips recover command again to
reimage the module.
asa-ips# sw-module module ips recover configure image
disk0:/IPS-SSP_5555-K9-sys-1.1-a-7.1-3-E4.aip
Image URL [tftp://192.0.2.1/IPS-5545-K9-sys-1.1-a-7.1-3-E4.aip]:
Port IP Address [192.0.2.226]:
VLAN ID [0]:
Gateway IP Address [192.0.2.254]:
asa-ips# debug module-boot
debug module-boot enabled at level 1
asa-ips# sw-module module ips reload
Reload module ips? [confirm]
Reload issued for module ips.
asa-ips# Mod-ips 228> ***
Mod-ips 229> *** EVENT: The module is reloading.
Mod-ips 230> *** TIME: 08:07:36 CST Jan 17 2012
Mod-ips 231> ***
Mod-ips 232> Mod-ips 233> The system is going down NOW!
Mod-ips 234> Sending SIGTERM to all processes
Mod-ips 235> Sending SIGKILL to all processes
Mod-ips 236> Requesting system reboot
Mod-ips 237> e1000 0000:00:07.0: PCI INT A disabled
Mod-ips 238> e1000 0000:00:06.0: PCI INT A disabled
Mod-ips 239> e1000 0000:00:05.0: PCI INT A disabled
Mod-ips 240> Restarting system.
Mod-ips 241> machine restart
Mod-ips 242> IVSHMEM: addr = 4093640704 size = 67108864
Mod-ips 243> Booting 'Cisco IPS'
Mod-ips 244> root (hd0,0)
Mod-ips 245> Filesystem type is ext2fs, partition type 0x83
Mod-ips 246> kernel /ips-2.6.ld ro initfsDev=/dev/hda1 init=loader.run rootrw=/dev/hda2
init
Mod-ips 247> fs=runtime-image.cpio.bz2 hda=nodma console=ttyS0 plat=saleen htlblow=1
hugepag
Mod-ips 248> es=3223
Mod-ips 249> [Linux-bzImage, setup=0x2c00, size=0x2bad80]
Mod-ips 250> Linux version 2.6.29.1 (ipsbuild@seti-teambuilder-a) (gcc version 4.3.2
(crosstool
Mod-ips 251> -NG-1.4.1) ) #56 SMP Tue Dec 6 00:46:11 CST 2011
Mod-ips 252> Command line: ro initfsDev=/dev/hda1 init=loader.run rootrw=/dev/hda2
initfs=runti
Mod-ips 253> me-image.cpio.bz2 hda=nodma console=ttyS0 plat=saleen htlblow=1
hugepages=3223
Mod-ips 254> KERNEL supported cpus:
Mod-ips 255> Intel GenuineIntel
Mod-ips 256> AMD AuthenticAMD
Mod-ips 257> Centaur CentaurHauls
Mod-ips 258> BIOS-provided physical RAM map:
Mod-ips 259> BIOS-e820: 0000000000000000 - 000000000009f400 (usable)
Mod-ips 260> BIOS-e820: 000000000009f400 - 00000000000a0000 (reserved)
Mod-ips 261> BIOS-e820: 00000000000f0000 - 0000000000100000 (reserved)
Mod-ips 262> BIOS-e820: 0000000000100000 - 00000000dfffd000 (usable)
Mod-ips 263> BIOS-e820: 00000000dfffd000 - 00000000e0000000 (reserved)
Mod-ips 264> BIOS-e820: 00000000fffbc000 - 0000000100000000 (reserved)
Mod-ips 265> BIOS-e820: 0000000100000000 - 0000000201400000 (usable)