Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA-SSM-20 query...

I have an ASA-SSM-20 module seems to be faulty on an ASA. I've been looking around the net and it looks like these modules usually come in 2 flavours - AIP-SSM-20 and CSC-SSM-20. The output from the ASA doesn't specifiy whether it is either of these.

Are these variances determined by a license of software installed? Or is there something I'm missing?

I want to replace the hardware but need to know the above....

Can anyone advise?

13 REPLIES
Red

ASA-SSM-20 query...

Can you provide the output of "shwo module", this would let you know wat device it is....

Thanks,

Varun

Thanks, Varun Rao Security Team, Cisco TAC
New Member

ASA-SSM-20 query...

EUDR-SunG-ASA-01# sh module

Mod Card Type                                    Model              Serial No.

--- -------------------------------------------- ------------------ -----------

  0 ASA 5520 Adaptive Security Appliance         ASA5520            JMX1421L3XS

  1 ASA 5500 Series Security Services Module-20  ASA-SSM-20         JAF1418BGLD

Mod MAC Address Range                 Hw Version   Fw Version   Sw Version    

--- --------------------------------- ------------ ------------ ---------------

  0 5475.d026.e462 to 5475.d026.e466  2.0          1.0(11)5     8.2(4)8

  1 68ef.bdd0.d5bc to 68ef.bdd0.d5bc  1.0          1.0(11)5    

Mod SSM Application Name           Status           SSM Application Version

--- ------------------------------ ---------------- --------------------------

Mod Status             Data Plane Status     Compatibility

--- ------------------ --------------------- -------------

  0 Up Sys             Not Applicable        

1 Down               Not Applicable           Not powered on completely

Red

ASA-SSM-20 query...

It is an IPS module.

Thanks, Varun Rao Security Team, Cisco TAC
New Member

ASA-SSM-20 query...

how can you tell whether it is an AIP or CSC?

Red

Re: ASA-SSM-20 query...

Hi,

I checked it with the Serial Number at my end. The device is currently not powered on hence it is not showing whether it is an IPS or CSC since ASA is not able to detect.

In that case you can either check the ASA datasheet or the hardware guides to identify which module is it, moreover, if were you using this module earlier ??, if yes, then "show run policy" would definitely let you know if it was configured for IPS or CSC.

Thanks,

Varun

Thanks, Varun Rao Security Team, Cisco TAC
New Member

ASA-SSM-20 query...

you should first try reseating the module and see if it comes up

if it does not come up try to reimage the module

if reimage does not resolve the issue then you can proceed with the hardware replacement.

correct part no. for this is

ASA-SSM-AIP-20-K9=
New Member

ASA-SSM-20 query...

have already tried reseating....

how can i reimage if it isnt working?

New Member

ASA-SSM-20 query...

ASA-SSM-20 is always a IPS module and the full part ID is ASA-SSM-AIP-20-K9

where in K9 is the license installed on this module.

hope this resolves you query

New Member

ASA-SSM-20 query...

reimage will work even if the module is down.

refer to the below link for reimage.

http://www.cisco.com/en/US/docs/security/ips/5.0/configuration/guide/cli/cliimage.html#wpxref68481

New Member

ASA-SSM-20 query...

amit - a show inventory gives the following:

Name: "module 1", DESCR: "ASA 5500 Series Security Services Module-20"

PID: ASA-SSM-20        , VID: V02     , SN: JAF1418BGLD

it doesnt have the same PID as being what you listed above?

New Member

ASA-SSM-20 query...

SN:JAF1418BGLD is for the part ASA-AIP-20-INC-K9 which is again same as

ASA-SSM-AIP-20-K9=

you have IPS in your ASA the SN is always unique for any device or module and the SN you mentioned is for the IPS module

so you can be rest assured that its IPS module.
Red

ASA-SSM-20 query...

Can you check "show run policy", if you were using it earlier.

Thanks, Varun Rao Security Team, Cisco TAC
New Member

ASA-SSM-20 query...

i have the following:

Name: "slot 1", DESCR: "ASA 5500 Series Security Services Module-20"

PID: ASA-SSM-20        , VID: V01 , SN: JAF114404DG

can that replace it?

1001
Views
0
Helpful
13
Replies
CreatePlease to create content