Health And Status Information - Cisco IPS 7.1 Installation Manual

Intrusion prevention system appliance and module
Table of Contents

Advertisement

Troubleshooting the ASA 5585-X IPS SSP
Configuration Examples
Use the following configuration for the primary ASA:
interface GigabitEthernet0/7
description LAN Failover Interface
failover
failover lan unit primary
failover lan interface folink GigabitEthernet0/7
failover interface ip folink 172.27.48.1 255.255.255.0 standby 172.27.48.2
Use the following configuration for the secondary ASA:
interface GigabitEthernet0/7
description LAN Failover Interface
failover
failover lan unit secondary
failover lan interface folink GigabitEthernet0/7
failover interface ip folink 172.27.48.1 255.255.255.0 standby 172.27.48.2
Traffic Flow Stopped on IPS Switchports
Problem
adaptive security appliance when the ASA 5585-X IPS SSP is reset or shut down. This affects all traffic
through these ports regardless of whether or not the traffic would have been monitored by the IPS. The
link on the ports will link down when the ASA 5585-X IPS SSP is reset or shut down.
Solution
their link when the ASA 5585-X IPS SSP is reset or shut down.

Health and Status Information

To see the general health of the ASA 5585-X IPS SSP, use the show module 1 details command.
asa# show module 1 details
Getting details from the Service Module, please wait...
ASA 5585-X IPS Security Services Processor-20 with 8GE
Model:
Hardware version:
Serial Number:
Firmware version:
Software version:
MAC Address Range:
App. name:
App. Status:
App. Status Desc:
App. version:
Data plane Status:
Status:
Mgmt IP addr:
Mgmt Network mask:
Mgmt Gateway:
Mgmt Access List:
Mgmt Access List:
Mgmt web ports:
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.1
E-78
Traffic on any port located on the ASA 5585-X IPS SSP (1/x) no longer passes through the
Using the ports located on the ASA 5585-X IPS SSP (1/x), and resetting or shutting
Possible Cause
it down via any mechanism.
Use the ports on the adaptive security appliance (0/x) instead because those ports do not lose
ASA5585-SSP-IPS20
1.0
ABC1234DEFG
2.0(1)3
7.1(1)E4
8843.e12f.5414 to 8843.e12f.541f
IPS
Up
Normal Operation
7.1(1)E4
Up
Up
192.0.2.3
255.255.255.0
192.0.2.254
10.0.0.0/8
64.0.0.0/8
443
Appendix E
Troubleshooting
OL-24002-01

Advertisement

Table of Contents
loading

Table of Contents