Download Print this page
Cisco ASA 5585-X Maintenance Manual
Cisco ASA 5585-X Maintenance Manual

Cisco ASA 5585-X Maintenance Manual

Maintenance and upgrade procedures
Hide thumbs Also See for ASA 5585-X:

Advertisement

Maintenance and Upgrade Procedures
This chapter describes maintenance and upgrade procedures, and includes the following sections:
Removing and Installing SSPs
The ASA 5585-X comes with a core Security Services Processor (SSP) already installed (SSP-10,
SSP-20, SSP-40, or SSP-60). You can install an additional SSP (core SSP, IPS SSP, ASA CX SSP, or
FirePOWER SSP) in slot 1.
For a matrix describing which module configurations are allowed, see the
table.
Feature limitations may apply to dual SSPs. Refer to your configuration guide for more information.
Note
The add-on SSP will not run without the core SSP installed. The add-on SSP must be installed in the
upper slot (slot 1), with the core SSP in the bottom slot (slot 0). You must power off the ASA 5585-X to
remove and install SSPs; the SSPs are not hot-swappable.
OL-22567-02
Removing and Installing SSPs, page 4-1
Removing and Installing SSP Hard Disk Drives, page 4-4
Installing and Removing Cisco ASA 5585-X Network I/O Modules, page 4-5
Removing and Installing the Power Supply Module, page 4-11
Removing and Installing the Fan Module, page 4-27
Installing a Slide Rail Kit, page 4-29
Installing and Removing a Slide-mounted Chassis, page 4-30
Mounting the Chassis Using a Fixed Rack Mount, page 4-39
Installing the Cable Management Brackets, page 4-41
Troubleshooting Loose Connections, page 4-43
C H A P T E R
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
4
ASA Module Compatibility
4-1

Advertisement

loading

Summary of Contents for Cisco ASA 5585-X

  • Page 1 The add-on SSP will not run without the core SSP installed. The add-on SSP must be installed in the upper slot (slot 1), with the core SSP in the bottom slot (slot 0). You must power off the ASA 5585-X to remove and install SSPs;...
  • Page 2 You must install slot trays in all empty slots to maintain the proper air flow. This also prevents EMI, which can disrupt other equipment. On the front panel of the ASA 5585-X, loosen the captive screws from either the top slot (for the add-on Step 7 SSP), or bottom slot (for the core SSP).
  • Page 3 Reconnect the power cable to the ASA 5585-X. Step 13 Power on the ASA 5585-X. Step 14 Press Enter to confirm. Step 15 Verify that the PWR indicator on the front panel is green. Step 16 Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide OL-22567-02...
  • Page 4 Removing and Installing SSP Hard Disk Drives The CX or FirePOWER SSP resides in slot 1 (the top slot) of the Cisco ASA 5585-X. The SSP includes two hard disk drives in a RAID 1 configuration. If one of the hard disk drives fails, you can remove and install a replacement.
  • Page 5 Cisco ASA 5585-X 20-port 1-G Network I/O Module • The network I/O module is not hot-swappable, so you must power off the ASA 5585-X before installing or removing the module. You must have a Phillips head screwdriver to install the slot divider that divides slot 1 into two bays.
  • Page 6 Chapter 4 Maintenance and Upgrade Procedures Installing and Removing Cisco ASA 5585-X Network I/O Modules Figure 4-2 shows the port numbering for the 4-port network I/O module. Figure 4-2 4-Port Network I/O Module Port Numbering C is c o A S A 4...
  • Page 7 T A T U S GigabitEthernet 00 through 07 GigabitEthernet 08 through 19 Caution Be sure the ASA software version installed on your ASA 5585-X supports the network I/O modules and the accompanying SFP/SFP+ transceivers. Refer to Cisco ASA Compatibility for more information.
  • Page 8 These SFP+ modules require ASA 8.2.5 or later: SFP-10G-LRM, SFP-10G-LR, SFP-H10GB-CU1M, Note SFP-H10GB-CU3M, and SFP-H10GB-CU5M. Only SFP/SFP+ transceiver modules certified by Cisco are supported on the ASA 5585-X. Note Protect your SFP/SFP+ transceivers by inserting clean dust plugs into the SFP/SFP+ modules after Caution extracting cables from them.
  • Page 9 Chapter 4 Maintenance and Upgrade Procedures Installing and Removing Cisco ASA 5585-X Network I/O Modules Figure 4-5 Removing the Empty Slot Tray SF P1 SF P0 MG MT US B AU X CO NS OL RE SE T Empty slot tray...
  • Page 10 Chapter 4 Maintenance and Upgrade Procedures Installing and Removing Cisco ASA 5585-X Network I/O Modules Figure 4-7 Installing a 4- or 8-Port 10-G Network I/O Module SF P1 SF P0 MG MT US B AU X CO NS OL RE SE T...
  • Page 11 Verify that the PWR indicator on the front panel is green. Step 13 Removing and Installing the Power Supply Module This section describes how to remove and install power supply modules in the ASA 5585-X, and includes the following topics: •...
  • Page 12 Two DC power supply modules AC Power Supply Module The ASA 5585-X ships with one AC power supply module and one fan module installed, except for the ASA 5585-X with SSP-60, which ships with two AC power supply modules installed in a load balancing/sharing configuration.
  • Page 13 If you remove a power supply or fan module, replace it immediately to prevent disruption of service. If the appliance is subjected to environmental overheating, it shuts down and you must manually power Caution cycle it to turn it on again. Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-13 OL-22567-02...
  • Page 14 Power supply module and power Power supply module screws supply module handle Remove the power supply module by grasping the handle and pulling the power supply module away Step 4 from the chassis. Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-14 OL-22567-02...
  • Page 15 Step 9 the security appliance, make sure the IN OK and the FAN OK indicators are green and the OUT FAIL indicator is off (see Figure 4-11and Table 4-3). Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-15 OL-22567-02...
  • Page 16 You can install or replace either power-supply module without powering off the appliance, as long as one power-supply module is active and functioning correctly. Only the ASA 5585-X SSP-60 supports either two AC or two DC power-supply modules. Do not mix Note AC and DC power-supply modules in the same chassis.
  • Page 17: Installing The Dc Power Supply Module

    DC power-supply module operates from a single 40 A DC input circuit with at full output load of 1150 W, -40.5 VDC input, and does not exceed 33 A. To install a DC power-supply module in the ASA 5585-X, follow these steps: Step 1...
  • Page 18 You must have two DC power-supply modules installed at all times. Step 5 Connect DC power source by following the steps in Connecting DC Power to the ASA 5585-X, page 4-19. Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-18 OL-22567-02...
  • Page 19 Maintenance and Upgrade Procedures Removing and Installing the Power Supply Module Connecting DC Power to the ASA 5585-X This section describes how to connect DC power to the Cisco ASA 5585-X, and contains the following topics: • Prerequisites, page 4-19 •...
  • Page 20: Step 1

    Verify that the power switch on the power supply you are installing is in the STANDBY ( ) position. Step 2 Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-20 OL-22567-02...
  • Page 21: Figure

    Position the positive (+) source DC cable lug on the power supply positive (+) terminal posts. Slide the lock-washers over the terminal posts and tighten the nuts to secure the source lug to the posts. Do not over-tighten the nuts (see Table 4-5). Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide OL-22567-02 4-21...
  • Page 22 Caution To prevent short circuit or shock hazard after wiring the DC-input power supply, you must re-install the terminal block cover. Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-22 OL-22567-02...
  • Page 23 If you replaced only one power supply module, the power source is already on. You can hot swap the module you are replacing and then turn its power back on. Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-23...
  • Page 24 Hazardous voltage or energy may be present on DC power terminals. Always replace cover when Warning terminals are not in service. Be sure uninsulated conductors are not accessible when cover is in place. Statement 1075 Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-24 OL-22567-02...
  • Page 25 Using a 5/16-inch nut-driver, loosen and remove the four nut and lock-washer pairs from the DC power Step 4 lugs. Set the nuts and lock-washers aside (Figure 4-22 on page 4-26). Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide OL-22567-02 4-25...
  • Page 26 Removing the Source DC Cables from the Power Supply Module Source DC negative (–) cable Source DC positive (+) cable Source DC ground cable Step 6 Remove the DC negative, positive, and ground cables. Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-26 OL-22567-02...
  • Page 27: Power-Supply Module Screws

    ASA 5585-X SSP-60, which ships with two power-supply modules. You can replace the fan module in the ASA 5585-X if necessary. The fan module is hot-pluggable. You can install or replace the fan module without powering down the ASA 5585-X, as long as the power-supply module is active and functioning correctly.
  • Page 28 Maintenance and Upgrade Procedures Removing and Installing the Fan Module To remove and install a fan module, follow these steps: From the right-hand side of the back panel of the ASA 5585-X loosen the captive fan-module screws Step 1 until they release.
  • Page 29 Before installing the appliance in a rack-mount slide rail, you must install the slide rail kit hardware. The slide rail kit hardware ships with the ASA 5585-X. Note To install the slide rail kit hardware on the ASA 5585-X, follow these steps: Power off the appliance. Step 1 Remove the power cable from the appliance.
  • Page 30 Brackets for the Slide Rail Kit Installing and Removing a Slide-mounted Chassis A slide rail kit ships with the ASA 5585-X. Note After you have installed slide rail hardware on the appliance, you can install the slide rails in the rack and install the chassis.
  • Page 31: Package Contents

    (Figure 4-27). Note After installing the square or round studs into the rack post, verify that the locking clip is fully seated and secure against the rack rail. Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-31 OL-22567-02...
  • Page 32 It is critical that the screws are installed and secured to the front and rear end of the slide rails. Caution The rack opening (the distance from the front to back rack uprights) should be between 26.5 and Note 38 inches. Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-32 OL-22567-02...
  • Page 33 The cage nut will be used later to secure the chassis to the rack post. For threaded hole racks, no additional hardware is needed. Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-33...
  • Page 34 Before installing the chassis, make sure that the slide rails are properly installed and that the perforated Caution holes on the outer slide rail align with the perforated holes on the chassis. Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-34 OL-22567-02...
  • Page 35 For square hole racks, secure the chassis to the rack by installing the #10-32 screw into the cage nut that you installed in Step 3. For threaded hole racks, secure the front of the chassis by installing the #10-32 screws into the rack threaded hole. Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-35 OL-22567-02...
  • Page 36 Chapter 4 Maintenance and Upgrade Procedures Installing and Removing a Slide-mounted Chassis Figure 4-31 Securing the Chassis to the Outer Rail Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-36 OL-22567-02...
  • Page 37 Remove the screws from the front brackets of the rail post (Figure 4-32). Step 1 Figure 4-32 Removing the Screws from the Outer Rail Pull the chassis out to the locked position. Step 2 Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-37 OL-22567-02...
  • Page 38 Remove the two screws from the front and rear of the rack that are securing the slide rail, and release the Step 4 latch and pull out the rails (Figure 4-34). Figure 4-34 Releasing the Latch to Pull Out the Rails Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-38 OL-22567-02...
  • Page 39 If you are not able to use the slide rail kit in your rack installation, an optional fixed rack-mount solution is available. You can install fixed front and rear rack-mount brackets on the ASA 5585-X so that you can easily mount it in a rack.
  • Page 40 For added security, screw in the front slide rail brackets to the rack. Step 10 Secure the slide brackets to the corresponding holes in the rear rack rail using the screws provided. Step 11 Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-40 OL-22567-02...
  • Page 41: Installing The Cable Management Brackets

    Power on the adaptive security appliance. Installing the Cable Management Brackets The ASA 5585-X ships with two cable management brackets that you can use to organize the cables connected to the adaptive security appliance. To install the cable management brackets on the ASA 5585-X, follow these steps: Power off the adaptive security appliance.
  • Page 42 Re-attach the power cable to the adaptive security appliance. Step 5 Organize the cables through the cable management brackets on the adaptive security appliance. Step 6 Power on the adaptive security appliance. Step 7 Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-42 OL-22567-02...
  • Page 43: Troubleshooting Loose Connections

    Check any interlock or interconnect indicators that indicate a component is not connected properly. • If problems continue, remove and re-install each connector, checking the connectors and sockets for • bent pins or other damage. Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-43 OL-22567-02...
  • Page 44 Chapter 4 Maintenance and Upgrade Procedures Troubleshooting Loose Connections Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide 4-44 OL-22567-02...