How to Fix Rommon Modul IPS SSP on ASA?

[williammanurung]

Hai guys,

I have ASA5585 with ASA5585-SSP-IPS20, the problem is my modul ssp ips 20 stuck in rommon mode.

Can anyone give me information how to fix it? where the file system image IOS of modul ssp ips20 is saved? I can't find it.

Best regards,

William.

[Marvin Rhoads]

To re-build the image onto an ASA 5585-X IPS SSP you need to follow the procedure described here:

http://www.cisco.com/c/en/us/td/docs/security/ips/7-1/configuration/guide/cli/cliguide71/cli_system_images.html#67354

The image you need can be found here (service contract rquired for access):

https://software.cisco.com/download/release.html?mdfid=286129615&flowid=49062&softwareid=282549758&release=7.3(5)E4&relind=AVAILABLE&rellifecycle=&reltype=all

You would need the file "IPS-SSP_20-K9-sys-1.1-a-7.3-5-E4.img". 

Note that this product is well past end of sales. IPS signature updates (assuming you have a subscription) will end as of April 2018.

[williammanurung]

Hai marvin, thanks for your answer.

The only one we can reimage ono ASA IPS is via ftp,tftp and scp ? i dont know where is the IPS-SSP_20-K9-sys-1.1-a-7.3-5-E4.img saved ? is it in disk0 or flash ASA 5585? or just take via ftp,tftp and scp?

[Marvin Rhoads]

You're welcome.

The recovery image goes directly onto the IPS SSP hardware module via tftp only. Once it has downloaded it will bootstrap the module as noted in the first link I shared:

This transfers the software image from the TFTP server to the ASA 5585-X IPS SSP and restarts it.

asa# hw-module module 1 recover boot

[williammanurung]

Hai marvin,

So, after reimage successfull and ips ssp working, and the modul ips ssp reload where is the modul can find its image?

As i know, like switch ,router or nexus, the file system image is saved in its bootflash.

[Marvin Rhoads · Accepted solution]

The IPS SSP stores the boot image in a boot partition on its internal disk that is not directly user-accessible.

You can see it is allocated with the "show version" command on the IPS console:

http://www.cisco.com/c/en/us/td/docs/security/ips/7-0/configuration/guide/cli/cliguide7/cli_administration.html#wp1035985

[williammanurung]

I got it.

Thanks marvin.