ASA5512XIPS模块初始化.docxVIP

拓扑图介绍:把IPS SYSTEM?image拷贝到ASA5512X本地Flash:?ciscoasa# dirDirectory of disk0:/10?drwx??4096?19:44:02 Aug 24 2012??log22?drwx??4096?19:44:16 Aug 24 2012??crypto_archive110?-rwx??0?19:44:16 Aug 24 2012??nat_ident_migrate23?drwx??4096?19:44:18 Aug 24 2012??coredumpinfo120????-rwx????02:36:38 Mar 29 2013??IPS-SSP_5512-K9-sys-1.1-a-7.1-7-E4.aip111?-rwx??4096?00:00:00 Jan 01 1980??FSCK0000.REC112?-rwx??24576?00:00:00 Jan 01 1980??FSCK0001.REC113?-rwx??4096?00:00:00 Jan 01 1980??FSCK0002.REC114?-rwx??28672?00:00:00 Jan 01 1980??FSCK0003.REC115?-rwx??4096?00:00:00 Jan 01 1980??FSCK0004.REC116?-rwx??2600?01:22:00 Mar 21 2013??old_running.cfg117?-rwx??1760?01:22:00 Mar 21 2013??admin.cfg118?-rwx?02:33:24 Mar 21 2013??asa911-4-smp-k8.bin119?-rwx?02:34:52 Mar 21 2013??asdm-712.bin?安装IPS SYSTEM?Image:ciscoasa# sw-module module ips recover configure image disk0:IPS-SSP_5512-K9-sys-1.1-a-7.1-7-E4.aip?把启动IPS模块:ciscoasa# sw-module module ips recover boot?查看IPS模块状态（正在Recover中）:ciscoasa# show module ips detailsGetting details from the Service Module, please wait...Unable to read details from module ipsCard Type:?UnknownModel:?N/AHardware version:???N/ASerial Number:?FCH16327W76Firmware version:???N/ASoftware version:??MAC Address Range:??30f7.0d48.90b6 to 30f7.0d48.90b6Data Plane Status:??Not ApplicableStatus:?RecoverLicense:?IPS Module??Enabled??32 days?查看IPS模块状态（正常）:ciscoasa# show module ips detailsGetting details from the Service Module, please wait...Card Type:?ASA 5512-X IPS Security Services ProcessorModel:?ASA5512-IPSHardware version:???N/ASerial Number:?FCH16327W76Firmware version:???N/ASoftware version:???7.1(7)E4MAC Address Range:??30f7.0d48.90b6 to 30f7.0d48.90b6App. name:?IPSApp. Status:?ReloadApp. Status Desc:???Starting upApp. version:?7.1(7)E4Data Plane Status:??DownStatus:?UpLicense:?IPS Module??Enabled??32 daysMgmt IP addr:?Mgmt Network mask:??Mgmt Gateway:?Mgmt web ports:?443Mgmt TLS enabled:???true?查看ASA模块:ciscoasa# show moduleMod??Card T