Download Print this page

Advertisement

Cisco ASA 5512-X, ASA 5515-X, ASA
5525-X, ASA 5545-X, and ASA 5555-X
Hardware Installation Guide
First Published:
February 28, 2012
Last Updated:
June 29, 2016
Cisco Systems, Inc.
www.cisco.com

Advertisement

   Related Manuals for Cisco ASA 5512-X

   Summary of Contents for Cisco ASA 5512-X

  • Page 1

    Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide First Published: February 28, 2012 Last Updated: June 29, 2016 Cisco Systems, Inc. www.cisco.com...

  • Page 2

    Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company.

  • Page 3: About This Guide

    This guide describes how to install and maintain the Cisco ASA 5500-X series appliances. Information in this guide applies to the following Cisco ASA 5500-X Series models: ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X. References to “Cisco ASA 5500-X Series” and “ASA” apply to all previously listed models unless specifically noted otherwise.

  • Page 4

    Warning: This unit has more than one power supply connection; all connections must be removed completely to completely remove power from the unit. Statement 102 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 5

    Statements 1029 and 142 Product Disposal Warning Warning: Ultimate disposal of this product should be handled according to all national laws and regulations. Statement 1040 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 6: Related Documentation

    Cisco ASA 5500-X series. It also includes translations of the safety warnings used in this guide. Related Documentation For a complete list of the Cisco ASA 5500-X series documentation and where to find it, see the documentation roadmap at the following URL: http://www.cisco.com/en/US/docs/security/asa/roadmap/asaroadmap.html...

  • Page 7

    Obtaining Documentation and Submitting a Service Request Obtaining Documentation and Submitting a Service Request For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see What’s New in Cisco Product Documentation.

  • Page 8

    About This Guide Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 9: Package Contents

    About the ASA 5500-X This chapter describes the Cisco ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X models. We recommend that you read this entire guide before beginning any of the procedures contained herein. Warning: Only trained and qualified personnel should install, replace, or service this equipment...

  • Page 10

    Rack-Mount Bracket Kit Internal and External USB Flash Drives The Cisco ASA 5500-X has internal and (optional) external USB drives.  Internal USB Drive, page 11 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 11

    You must install a Cisco Solid State Drive (SSD) for use with the some software modules. Only Cisco SSDs are supported. You can install one SSD in the ASA 5512-X, ASA 5515-X, and ASA 5525-X. You can install two SSDs in a RAID 1 configuration in the ASA 5545-X and ASA 5555-X.

  • Page 12

    The ASA uses field-replaceable small form-factor pluggable (SFP) modules to establish Gigabit Ethernet connections. Use only Cisco-certified SFP modules on the ASA. Each SFP module has an internal serial EEPROM that is encoded with security information. This encoding allows Cisco to identify and validate that the SFP module meets the requirements for the ASA.

  • Page 13: Front Panel Leds

    Rear Panel Ports, page 17 Front Panel LEDs Figure 1 shows the front panel LEDs for the ASA 5512-X, ASA 5515-X, and ASA 5525-X models. Figure 1 Front Panel LEDs for the Cisco ASA 5512-X, ASA 5515-X, and ASA 5525-X...

  • Page 14

    For information about the power state, see Power Supply Considerations, page Hard-disk slot Indicates the slot for hard-disk 1. Hard-disk release button Releases hard-disk 1 from the device. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 15

    Solid green—System has passed power-up diagnostics.  Off—Power-up diagnostics are not operational. Rear Panel LEDs Figure 3 shows the rear panel LEDs for the ASA 5500-X. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 16

    Off—No hard-disk drive present. Hard Disk Drive 1 status:  Flashing green—Proportioned to read/write activity.  Solid amber—Hard-disk drive failure.  Off—No hard-disk drive present. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 17

    Description Management 0/0 The GigabitEthernet interface that is restricted to management use only. interface Connect with an RJ-45 cable. Power supply The chassis power supply. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 18

    Power Supply The ASA 5512-X, ASA 5515-X, and ASA 5525-X ship with one fixed fan and one fixed power supply (AC or DC) installed. The ASA 5545-X and ASA 5555-X ship with one power supply (AC or DC) installed.

  • Page 19

    The AC power supply consumes a maximum of 471 W of input power. When the Cisco ASA 5500-X operates on AC power, it supports the ability to restore the previous power state of the system in the event that AC power is lost.

  • Page 20

    The warning event can be temperature, voltage, current, or fan operating outside the normal operating range. The power supply is shut down. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 21: Hardware Specifications

    Altitude 15,000 ft. 15,000 ft. 15,000 ft. 15,000 ft. 15,000 ft. For additional specifications, see the product data sheet at the following URL: http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-x-series-next-generation-firewalls/data- sheet-c78-729807.html Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 22

    NBR 14136 IEC 60320/C13 AC power cord (Brazil) CAB-AC-C13-KOR 250V KSC8305 IEC 60320/C13 AC power cord (Korea) CAB-ACTW 250V CNS10917 IEC 60320/C13 AC power cord (Taiwan) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 23

    Cord set rating: 10A, 250V Connector: IEC 60320/C13 Figure 3-9 CAB-AC (North America) Plug: NEMA 5-15P Cord set rating: 10A, 125V Connector: IEC 60320/C13 Figure 3-10 CAB-ACA (Australia) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 24

    Plug: CE123-16-VII Cord set rating: 10A, 250V Connector: IEC 60320/C13 Figure 3-12 CAB-ACR (Argentina) Plug: IRAM 2073 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 25

    Cord set rating: 10A, 250V Connector: IEC 60320/C13 Figure 3-14 CAB-ACU (United Kingdom) Plug: BS1363a/SS145 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Figure 3-15 CAB-JPN-3PIN (Japan) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 26

    Plug: SABS 1661 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Figure 3-17 CAB-ACC (China) Plug: GB2009.1-2008 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 27

    Plug: IS 6538-1971 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Figure 3-19 CAB-C13-ACB (Brazil) Plug: NBR 14136 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 28

    CAB-AC-C13-KOR (Korea) Plug: KSC8305 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Figure 3-21 CAB-ACTW (Taiwan) Plug: CNS10917 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 29: Preparing For Installation

    If you need to remove the chassis cover to install a hardware component, such as additional memory or an interface card, doing so does not affect your Cisco warranty. Upgrading the ASA does not require any special tools and does not create any radio frequency leaks.

  • Page 30: General Site Requirements

    Improper placement can also make it difficult for you to access the chassis for maintenance. For information about physical specifications, see Hardware Specifications, page Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 31

    Chassis Coupler North America CAB-AC (72-0259) 8.2 ft (2.5 m) 125 VAC, 10 A Australia, CAB-ACA 8.2 ft (2.5 m) 250 VAC, 10 A (72-0746-01) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 32

    250 VAC, 10 A (72-1925-01) India CAB-IND-10A 8.2 ft (2.5 m) 250 VAC, 10 A (37-0863-01) South Africa AIR-PWR-CORD-SA 8.2 ft (2.5 m) 250 VAC, 10 A (37-0346-01) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 33

    Baffles can help to isolate exhaust air from intake air, which also helps to draw cooling air through the chassis. The best placement of the baffles depends on the airflow patterns in the rack. Experiment with different arrangements to position the baffles effectively. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 34

    Preparing for Installation General Site Requirements Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 35

    Connecting Cables, Turning on Power, and Verifying Connectivity, page 45 Rack Mount the Chassis The ASA 5512-X, 5515-X, and 5525-X chassis ship with rack mount brackets installed on the front of the chassis. 5545-X and 5555-X chassis ship with the slide rail mounting system.

  • Page 36

    We recommend that you install the chassis with the front bezel facing the cold aisle. (See Figure 3 for an example of air flow from front to back.) Figure 3 Airflow Direction Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 37

    ASA 5500-X series chassis, as well.  Prepare an ASA 5512-X, ASA 5515-X, or ASA 5525-X to Use a Slide Rail Rack Mount System, page 37 ...

  • Page 38

    Install two shoulder screws into the threaded hole locations on either side of the chassis (see Figure 7 for one side), and ensure that they are tight. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 39

    For the procedure for attaching the brackets to the front or back of the chassis, see Rack Mount the ASA 5512-X, 5515-X, and 5525-X With Brackets, page Before You Begin  Verify the box contents Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 40

    Use a Phillips screwdriver to secure the inner slide rail with one Phillips screw (B). Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 41

    For racks shorter than 24 inches in depth, remove the rear bracket with a Phillips head screwdriver, pull the release tab, and adjust the slide rail to the appropriate length for the rack. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 42

    The following illustration shows the casing pulled back on the inner peg. The rail can be installed in three different rack types. The following illustration shows a rail installed in a threaded rail rack. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 43

    Align the inner slide rails on the unit to the middle outer slide rails. Push the inner slide rails into the middle outer slide rails until they lock into place. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 44

    Press the side release tabs to unlock the inner slide rail, and push the chassis into the rack. Secure the chassis to the rack with the front captive screws. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 45

    Follow these steps to connect cables, turn on power, and verify connectivity. Procedure Place the chassis on a flat, stable surface, or in a rack (if you are rack-mounting it.) Connect the interface cables. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 46

    See the Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Quick Start Guide further instructions on how to set up your device. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 47

    Your ASA 5500-X ships with either ASA or Firepower Threat Defense software preinstalled. To reimage your device, see Reimage the Cisco ASA or Firepower Threat Defense Device. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 48

    Installing and Connecting the ASA 5500-X Connecting Cables, Turning on Power, and Verifying Connectivity Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 49

    1. You may need to use a screwdriver if the screw is too tight. Note: Removing the chassis cover does not affect your Cisco warranty. Upgrading the ASA does not require any special tools and does not create any radio frequency leaks. Cisco Systems, Inc.

  • Page 50

    (See Figure Figure 2 Replacing the Chassis Cover Thumbscrew Re-install the chassis on a rack. Re-install the network interface cables. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 51

    You can add or replace an expansion I/O card in the ASA 5500-X series chassis. These cards provide six additional GigabitEthernet copper or small form-factor pluggable (SFP) ports.  Install an I/O Card in the Cisco ASA 5512-X, 5515-X, and 5525-X Chassis, page 51  Install an I/O Card in the Cisco ASA 5545-X and 5555-X Chassis, page 54...

  • Page 52

    -53.) Use firm upward pressure and a gentle rocking motion, as the card is firmly seated. Caution: Keep hands clear of all electronics underneath the card cover. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 53

    Connect the blue connector end of the Regex ribbon cable to the motherboard, and close the green tab. Install the chassis cover, and replace the chassis in the rack. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 54

    To expose the blue connector on the end of the Regex flexible circuit, push down on the center of the green connector clamp, and lift the end of the clamp to release the lock. (See Figure Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 55

    (See Figure 11.) Use firm upward pressure and a gentle rocking motion, as the card is firmly seated. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 56

    The small black plastic guide slides all the way into the chassis. The two hooks on the assembly plug into the two slots on the edge of the chassis. Figure 12 Inserting a New I/O Card Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 57

    SFP Module Support Use only Cisco certified SFP modules on the ASA. Each SFP module has an internal serial EEPROM that is encoded with security information. This encoding provides a way for Cisco to identify and validate that the SFP module meets the requirements for the ASA.

  • Page 58

    Latch designs are not linked to SFP model or technology types. For information about SFP models and technology types, see the label on the side of your SFP. To remove the SFP module, perform the following steps. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 59

    120 VAC, 20A U.S. (240 VAC, 10A international). Statement 1005 To remove and install an AC power supply, follow these steps. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 60

    Install the new power supply by aligning it with the power supply bay and pushing it into place until it is seated while supporting it from beneath with the other hand. (See Figure 18.) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 61

    Before performing any of the following procedures, ensure that power is removed from the DC circuit. Statement 1003 Warning: Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Statement 1030 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 62

    DC input power supply. Figure 20 shows the back panel of the ASA 5512-X, ASA 5515-X, and ASA 5525-X with the DC power supply. Figure 20 ASA 5512-X, ASA 5515-X, and ASA 5525-X Back Panel...

  • Page 63

    (see Figure 23 on page -64): — Ground lead wire (middle) — Positive (+) lead wire (left) — Negative (–) lead wire (right) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 64

    Only wires with insulation should extend from the DC power supply. Repeat Step 7 for the remaining two DC input power source wires: the positive lead wire and the negative lead wire. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 65

    (See Figure 26.) Save the slot cover for future use. Continue with 7.. Figure 26 Removing the Slot Cover Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 66

    Figure 29.) Figure 29 Installing the DC Power Supply To connect the DC input power source wires, see though Install the DC Input Power, page Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 67

    If you need to remove an old drive, on the front panel of the ASA, remove the SSD by pressing the button on the right side of the bay until the locking lever is released. Pull out the SSD. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 68

    ASA 5545/5555-X models. Figure 33 Installing an SSD in the ASA 5512/5515/5525-X Figure 34 Installing an SSD in the ASA 5545-X and ASA 5555-X Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 69

    SSDs are now active. If you replaced the drive in the ASA 5512-X, ASA 5515-X, or ASA 5525-X, you need to re-install the module using appropriate boot image. For more information, refer to the list of ASA-related Quick Start guides on cisco.com:...

  • Page 70

    Maintenance and Upgrade Procedures for the ASA 5500-X Install and Remove a Solid State Drive for a Services Module Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 71

    Figure 1 10/100 Port Pinouts Label 4 5 6 7 8 Figure 2 shows the 10BaseT, 100BaseTX, and 1000BASE-T connector (RJ-45). Cisco Systems, Inc. www.cisco.com Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 72

    Crossover—The first (far left) colored wire at one end of the cable is the third colored wire at the other end of the cable. Table 1 lists the rolled (console) cable pinouts for RJ-45. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 73

    10/100/1000BASE-T Management Port Cable Pinouts (MDI). (See Figure 2 an illustration of the pinouts.) Table 3 10/100/1000BASE-T Management Port Cable Pinouts (MDI) Signal TP0+ TP0- TP1+ TP2+ TP2- Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

  • Page 74

    Cisco Product Wavelength Core Size Baud Cable Number (nanometer) (micron) Rate Distance GLC-SX-MM= 62.5 1.0625 300 m 50.0 1.0625 500 m GLC-LH-SM= 1300 1.0625 10 km Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

This manual also for:

Asa 5515-x, Asa 5525-x, Asa 5545-x, Asa 5555-x

Comments to this Manuals

Symbols: 0
Latest comments: