Page 1
Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide First Published: February 28, 2012 Last Updated: June 29, 2016 Cisco Systems, Inc. www.cisco.com...
Page 2
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company.
This guide describes how to install and maintain the Cisco ASA 5500-X series appliances. Information in this guide applies to the following Cisco ASA 5500-X Series models: ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X. References to “Cisco ASA 5500-X Series” and “ASA” apply to all previously listed models unless specifically noted otherwise.
Warning: This unit has more than one power supply connection; all connections must be removed completely to completely remove power from the unit. Statement 102 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 5
Statements 1029 and 142 Product Disposal Warning Warning: Ultimate disposal of this product should be handled according to all national laws and regulations. Statement 1040 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Cisco ASA 5500-X series. It also includes translations of the safety warnings used in this guide. Related Documentation For a complete list of the Cisco ASA 5500-X series documentation and where to find it, see the documentation roadmap at the following URL: http://www.cisco.com/en/US/docs/security/asa/roadmap/asaroadmap.html...
Obtaining Documentation and Submitting a Service Request Obtaining Documentation and Submitting a Service Request For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see What’s New in Cisco Product Documentation.
Page 8
About This Guide Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
About the ASA 5500-X This chapter describes the Cisco ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X models. We recommend that you read this entire guide before beginning any of the procedures contained herein. Warning: Only trained and qualified personnel should install, replace, or service this equipment...
Page 10
Rack-Mount Bracket Kit Internal and External USB Flash Drives The Cisco ASA 5500-X has internal and (optional) external USB drives. Internal USB Drive, page 11 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
You must install a Cisco Solid State Drive (SSD) for use with the some software modules. Only Cisco SSDs are supported. You can install one SSD in the ASA 5512-X, ASA 5515-X, and ASA 5525-X. You can install two SSDs in a RAID 1 configuration in the ASA 5545-X and ASA 5555-X.
The ASA uses field-replaceable small form-factor pluggable (SFP) modules to establish Gigabit Ethernet connections. Use only Cisco-certified SFP modules on the ASA. Each SFP module has an internal serial EEPROM that is encoded with security information. This encoding allows Cisco to identify and validate that the SFP module meets the requirements for the ASA.
Rear Panel Ports, page 17 Front Panel LEDs Figure 1 shows the front panel LEDs for the ASA 5512-X, ASA 5515-X, and ASA 5525-X models. Figure 1 Front Panel LEDs for the Cisco ASA 5512-X, ASA 5515-X, and ASA 5525-X...
Page 14
For information about the power state, see Power Supply Considerations, page Hard-disk slot Indicates the slot for hard-disk 1. Hard-disk release button Releases hard-disk 1 from the device. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 15
Solid green—System has passed power-up diagnostics. Off—Power-up diagnostics are not operational. Rear Panel LEDs Figure 3 shows the rear panel LEDs for the ASA 5500-X. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Description Management 0/0 The GigabitEthernet interface that is restricted to management use only. interface Connect with an RJ-45 cable. Power supply The chassis power supply. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Power Supply The ASA 5512-X, ASA 5515-X, and ASA 5525-X ship with one fixed fan and one fixed power supply (AC or DC) installed. The ASA 5545-X and ASA 5555-X ship with one power supply (AC or DC) installed.
Page 19
The AC power supply consumes a maximum of 471 W of input power. When the Cisco ASA 5500-X operates on AC power, it supports the ability to restore the previous power state of the system in the event that AC power is lost.
Page 20
The warning event can be temperature, voltage, current, or fan operating outside the normal operating range. The power supply is shut down. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Altitude 15,000 ft. 15,000 ft. 15,000 ft. 15,000 ft. 15,000 ft. For additional specifications, see the product data sheet at the following URL: http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-x-series-next-generation-firewalls/data- sheet-c78-729807.html Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
If you need to remove the chassis cover to install a hardware component, such as additional memory or an interface card, doing so does not affect your Cisco warranty. Upgrading the ASA does not require any special tools and does not create any radio frequency leaks.
Improper placement can also make it difficult for you to access the chassis for maintenance. For information about physical specifications, see Hardware Specifications, page Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Chassis Coupler North America CAB-AC (72-0259) 8.2 ft (2.5 m) 125 VAC, 10 A Australia, CAB-ACA 8.2 ft (2.5 m) 250 VAC, 10 A (72-0746-01) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 32
250 VAC, 10 A (72-1925-01) India CAB-IND-10A 8.2 ft (2.5 m) 250 VAC, 10 A (37-0863-01) South Africa AIR-PWR-CORD-SA 8.2 ft (2.5 m) 250 VAC, 10 A (37-0346-01) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Baffles can help to isolate exhaust air from intake air, which also helps to draw cooling air through the chassis. The best placement of the baffles depends on the airflow patterns in the rack. Experiment with different arrangements to position the baffles effectively. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 34
Preparing for Installation General Site Requirements Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Connecting Cables, Turning on Power, and Verifying Connectivity, page 45 Rack Mount the Chassis The ASA 5512-X, 5515-X, and 5525-X chassis ship with rack mount brackets installed on the front of the chassis. 5545-X and 5555-X chassis ship with the slide rail mounting system.
Page 36
We recommend that you install the chassis with the front bezel facing the cold aisle. (See Figure 3 for an example of air flow from front to back.) Figure 3 Airflow Direction Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 37
ASA 5500-X series chassis, as well. Prepare an ASA 5512-X, ASA 5515-X, or ASA 5525-X to Use a Slide Rail Rack Mount System, page 37 ...
Page 38
Install two shoulder screws into the threaded hole locations on either side of the chassis (see Figure 7 for one side), and ensure that they are tight. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 39
For the procedure for attaching the brackets to the front or back of the chassis, see Rack Mount the ASA 5512-X, 5515-X, and 5525-X With Brackets, page Before You Begin Verify the box contents Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 40
Use a Phillips screwdriver to secure the inner slide rail with one Phillips screw (B). Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 41
For racks shorter than 24 inches in depth, remove the rear bracket with a Phillips head screwdriver, pull the release tab, and adjust the slide rail to the appropriate length for the rack. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 42
The following illustration shows the casing pulled back on the inner peg. The rail can be installed in three different rack types. The following illustration shows a rail installed in a threaded rail rack. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 43
Align the inner slide rails on the unit to the middle outer slide rails. Push the inner slide rails into the middle outer slide rails until they lock into place. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 44
Press the side release tabs to unlock the inner slide rail, and push the chassis into the rack. Secure the chassis to the rack with the front captive screws. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 45
Follow these steps to connect cables, turn on power, and verify connectivity. Procedure Place the chassis on a flat, stable surface, or in a rack (if you are rack-mounting it.) Connect the interface cables. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 46
See the Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Quick Start Guide further instructions on how to set up your device. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 47
Your ASA 5500-X ships with either ASA or Firepower Threat Defense software preinstalled. To reimage your device, see Reimage the Cisco ASA or Firepower Threat Defense Device. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 48
Installing and Connecting the ASA 5500-X Connecting Cables, Turning on Power, and Verifying Connectivity Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
1. You may need to use a screwdriver if the screw is too tight. Note: Removing the chassis cover does not affect your Cisco warranty. Upgrading the ASA does not require any special tools and does not create any radio frequency leaks. Cisco Systems, Inc.
Page 50
(See Figure Figure 2 Replacing the Chassis Cover Thumbscrew Re-install the chassis on a rack. Re-install the network interface cables. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 51
You can add or replace an expansion I/O card in the ASA 5500-X series chassis. These cards provide six additional GigabitEthernet copper or small form-factor pluggable (SFP) ports. Install an I/O Card in the Cisco ASA 5512-X, 5515-X, and 5525-X Chassis, page 51 Install an I/O Card in the Cisco ASA 5545-X and 5555-X Chassis, page 54...
Page 52
-53.) Use firm upward pressure and a gentle rocking motion, as the card is firmly seated. Caution: Keep hands clear of all electronics underneath the card cover. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 53
Connect the blue connector end of the Regex ribbon cable to the motherboard, and close the green tab. Install the chassis cover, and replace the chassis in the rack. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 54
To expose the blue connector on the end of the Regex flexible circuit, push down on the center of the green connector clamp, and lift the end of the clamp to release the lock. (See Figure Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 55
(See Figure 11.) Use firm upward pressure and a gentle rocking motion, as the card is firmly seated. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 56
The small black plastic guide slides all the way into the chassis. The two hooks on the assembly plug into the two slots on the edge of the chassis. Figure 12 Inserting a New I/O Card Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
SFP Module Support Use only Cisco certified SFP modules on the ASA. Each SFP module has an internal serial EEPROM that is encoded with security information. This encoding provides a way for Cisco to identify and validate that the SFP module meets the requirements for the ASA.
Page 58
Latch designs are not linked to SFP model or technology types. For information about SFP models and technology types, see the label on the side of your SFP. To remove the SFP module, perform the following steps. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 59
120 VAC, 20A U.S. (240 VAC, 10A international). Statement 1005 To remove and install an AC power supply, follow these steps. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 60
Install the new power supply by aligning it with the power supply bay and pushing it into place until it is seated while supporting it from beneath with the other hand. (See Figure 18.) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 61
Before performing any of the following procedures, ensure that power is removed from the DC circuit. Statement 1003 Warning: Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Statement 1030 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 62
DC input power supply. Figure 20 shows the back panel of the ASA 5512-X, ASA 5515-X, and ASA 5525-X with the DC power supply. Figure 20 ASA 5512-X, ASA 5515-X, and ASA 5525-X Back Panel...
Page 63
(see Figure 23 on page -64): — Ground lead wire (middle) — Positive (+) lead wire (left) — Negative (–) lead wire (right) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 64
Only wires with insulation should extend from the DC power supply. Repeat Step 7 for the remaining two DC input power source wires: the positive lead wire and the negative lead wire. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 65
(See Figure 26.) Save the slot cover for future use. Continue with 7.. Figure 26 Removing the Slot Cover Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 66
Figure 29.) Figure 29 Installing the DC Power Supply To connect the DC input power source wires, see though Install the DC Input Power, page Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
If you need to remove an old drive, on the front panel of the ASA, remove the SSD by pressing the button on the right side of the bay until the locking lever is released. Pull out the SSD. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 68
ASA 5545/5555-X models. Figure 33 Installing an SSD in the ASA 5512/5515/5525-X Figure 34 Installing an SSD in the ASA 5545-X and ASA 5555-X Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 69
SSDs are now active. If you replaced the drive in the ASA 5512-X, ASA 5515-X, or ASA 5525-X, you need to re-install the module using appropriate boot image. For more information, refer to the list of ASA-related Quick Start guides on cisco.com:...
Page 70
Maintenance and Upgrade Procedures for the ASA 5500-X Install and Remove a Solid State Drive for a Services Module Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Crossover—The first (far left) colored wire at one end of the cable is the third colored wire at the other end of the cable. Table 1 lists the rolled (console) cable pinouts for RJ-45. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
Page 73
10/100/1000BASE-T Management Port Cable Pinouts (MDI). (See Figure 2 an illustration of the pinouts.) Table 3 10/100/1000BASE-T Management Port Cable Pinouts (MDI) Signal TP0+ TP0- TP1+ TP2+ TP2- Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...