topic How to Fix Rommon Modul IPS SSP on ASA? in Network Security

How to Fix Rommon Modul IPS SSP on ASA?

williammanurung — Sun, 10 Mar 2019 13:51:57 GMT

Hai guys,

I have ASA5585 with ASA5585-SSP-IPS20, the problem is my modul ssp ips 20 stuck in rommon mode.

Can anyone give me information how to fix it? where the file system image IOS of modul ssp ips20 is saved? I can't find it.

Best regards,

William.

to re-build the image onto an

Marvin Rhoads — Tue, 20 Jun 2017 05:13:15 GMT

To re-build the image onto an ASA 5585-X IPS SSP you need to follow the procedure described here:

http://www.cisco.com/c/en/us/td/docs/security/ips/7-1/configuration/guide/cli/cliguide71/cli_system_images.html#67354

The image you need can be found here (service contract rquired for access):

https://software.cisco.com/download/release.html?mdfid=286129615&flowid=49062&softwareid=282549758&release=7.3(5)E4&relind=AVAILABLE&rellifecycle=&reltype=all

You would need the file "IPS-SSP_20-K9-sys-1.1-a-7.3-5-E4.img".

Note that this product is well past end of sales. IPS signature updates (assuming you have a subscription) will end as of April 2018.

Hai marvin, thanks for your

williammanurung — Wed, 21 Jun 2017 03:52:40 GMT

Hai marvin, thanks for your answer.

The only one we can reimage ono ASA IPS is via ftp,tftp and scp ? i dont know where is the IPS-SSP_20-K9-sys-1.1-a-7.3-5-E4.img saved ? is it in disk0 or flash ASA 5585? or just take via ftp,tftp and scp?

You're welcome.

Marvin Rhoads — Wed, 21 Jun 2017 04:02:48 GMT

You're welcome.

The recovery image goes directly onto the IPS SSP hardware module via tftp only. Once it has downloaded it will bootstrap the module as noted in the first link I shared:

This transfers the software image from the TFTP server to the ASA 5585-X IPS SSP and restarts it.

asa# hw-module module 1 recover boot

Hai marvin,

williammanurung — Wed, 21 Jun 2017 07:34:53 GMT

Hai marvin,

So, after reimage successfull and ips ssp working, and the modul ips ssp reload where is the modul can find its image?

As i know, like switch ,router or nexus, the file system image is saved in its bootflash.

The IPS SSP stores the boot

Marvin Rhoads — Wed, 21 Jun 2017 07:47:58 GMT

The IPS SSP stores the boot image in a boot partition on its internal disk that is not directly user-accessible.

You can see it is allocated with the "show version" command on the IPS console:

http://www.cisco.com/c/en/us/td/docs/security/ips/7-0/configuration/guide/cli/cliguide7/cli_administration.html#wp1035985

I got it. Thanks marvin.

williammanurung — Mon, 26 Jun 2017 16:13:59 GMT

I got it.

Thanks marvin.