AIP SSM Command/control Interface is not coming up

Unanswered Question
Jul 13th, 2009

Hi to all,

kindly be informed that , i have AIP SSM for ASA, i configured it and its workign fine.but its command control interface is not coming up at all, i connect my lap top direct to AIP management interface but its status is always is down.kindly look at this configuration and guide me how i can communicate with AIP using mangement inerface.

My LapTop ip is 192.168.1.2/24

***************

AIP Configuration

***************

IPS1# sh ver

Application Partition:

Cisco Intrusion Prevention System, Version 6.2(1)E3

Host:

Realm Keys key1.0

Signature Definition:

Signature Update S365.0 2008-10-31

Virus Update V1.4 2007-03-02

OS Version: 2.4.30-IDS-smp-bigphys

Platform: ASA-SSM-20

Serial Number: JAF1319AJRG

No license present

Sensor up-time is 13 days.

Using 1019777024 out of 2093604864 bytes of available memory (48% usage)

application-data is using 47.1M out of 166.8M bytes of available disk space (30% usage)

boot is using 39.7M out of 68.6M bytes of available disk space (61% usage)

MainApp E-2008_OCT_16_16_24 (Release) 2008-10-16T16:40:57-0500 Running

AnalysisEngine E-2008_OCT_16_16_24 (Release) 2008-10-16T16:40:57-0500 Running

CLI E-2008_OCT_16_16_24 (Release) 2008-10-16T16:40:57-0500

Upgrade History:

IPS-K9-6.2-1-E3 16:24:00 UTC Thu Oct 16 2008

Recovery Partition Version 1.1 - 6.2(1)E3

Host Certificate Valid from: 12-Jul-2009 to 13-Jul-2011

IPS1#sh conf

! ------------------------------

! Current configuration last modified Sun Jul 12 23:56:08 2009

! ------------------------------

! Version 6.2(1)

! Host:

! Realm Keys key1.0

! Signature Definition:

! Signature Update S365.0 2008-10-31

! Virus Update V1.4 2007-03-02

! ------------------------------

service interface

exit

! ------------------------------

service authentication

exit

! ------------------------------

service event-action-rules rules0

exit

! ------------------------------

service host

network-settings

host-ip 192.168.1.3/24,192.168.1.1

host-name Cinet-IPS1

telnet-option enabled

access-list 0.0.0.0/0

exit

time-zone-settings

offset 0

standard-time-zone-name UTC

exit

exit

! ------------------------------

service logger

exit

! ------------------------------

service network-access

exit

! ------------------------------

service notification

exit

! ------------------------------

service signature-definition sig0

exit

! ------------------------------

service ssh-known-hosts

exit

! ------------------------------

service trusted-certificates

exit

! ------------------------------

service web-server

exit

! ------------------------------

service anomaly-detection ad0

exit

! ------------------------------

service external-product-interface

exit

! ------------------------------

service health-monitor

exit

! ------------------------------

service analysis-engine

virtual-sensor vs0

physical-interface GigabitEthernet0/1

exit

exit

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
marcabal Mon, 07/13/2009 - 06:10

If the interface won't link Up, then it is likely a cabling problem.

Even with a bad configuration on the AIP you should at least get link UP if your cabling is correct, so I don't think configuration is your problem here.

If I remember right the command and control interface of the SSM is a 10/100 TX interface. When connecting from a laptop directly to the command and control interface it would require a cross over cable rather than the normal straight through cable.

If you don't have a cross over cable, then try connecting the SSM to a switch and see if the SSM will link UP. The switch is designed to internally do the cross over.

Actions

This Discussion