Cisco WS-C5509 Hardware Installation Manual
Cisco WS-C5509 Hardware Installation Manual

Cisco WS-C5509 Hardware Installation Manual

Asa 5500 series
Hide thumbs Also See for WS-C5509:
Table of Contents

Advertisement

Cisco ASA 5500 Series Hardware
Installation Guide
For the ASA 5510, ASA 5520, ASA 5540, and ASA 5550
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Customer Order Number: 78-17989-01
Text Part Number: 78-17989-01

Advertisement

Table of Contents
loading

Summary of Contents for Cisco WS-C5509

  • Page 1 Cisco ASA 5500 Series Hardware Installation Guide For the ASA 5510, ASA 5520, ASA 5540, and ASA 5550 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883...
  • Page 2 OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks.
  • Page 3: Table Of Contents

    Installing the Adaptive Security Appliance Rack-Mounting the Chassis Setting the Chassis on a Desktop Connecting the Interface Cables Maintenance and Upgrade Procedures C H A P T E R Removing and Replacing the Chassis Cover Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 4 Overview 4-20 Installing and Replacing the AIP/CSC SSM 4-21 Installing the AIP/CSC SSM 4-21 Replacing the AIP/CSC SSM 4-22 Upgrading Memory for the Cisco ASA 5510 4-22 Removing the DIMM 4-23 Installing the DIMM 4-25 4-26 Cable Pinouts A P P E N D I X...
  • Page 5: About This Guide

    Document Objectives This guide describes how to perform installation and maintenance procedures on the Cisco ASA 5500 Series Adaptive Security Appliances. The information in this guide applies to the following Cisco ASA 5500 Series Adaptive Security Appliance models: Cisco ASA 5510, Cisco ASA 5520, Cisco ASA 5540, and Cisco ASA 5550.
  • Page 6: Document Conventions

    Installation Warnings Be sure to read the Regulatory Compliance and Safety Information for the Cisco ASA 5500 Series document that accompanied this device before installing the chassis. This document contains important safety information. This section includes the following warnings: •...
  • Page 7 Do not work on the system or connect or disconnect cables during periods of lightning activity. Warning Statement 1001 Installation Instructions Warning Read the installation instructions before connecting the system to the power source. Statement 1004 Warning Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 8 Statement 1029 Product Disposal Warning Ultimate disposal of this product should be handled according to all national laws and regulations. Warning Statement 1040 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 9 This product relies on the building’s installation for short-circuit (overcurrent) protection. Ensure that Warning a fuse or circuit breaker no larger than 120 VAC, 15A U.S. (240 VAC, 10A international) is used on the phase conductors (all current-carrying conductors). Statement 13 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 10: Where To Find Safety And Warning Information

    Cisco technical documentation, at: http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html Subscribe to the What’s New in Cisco Product Documentation as an RSS feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service. Cisco currently supports RSS Version 2.0.
  • Page 11: Chapter 1 Overview

    The illustrations in this chapter show the Cisco ASA 5540 adaptive security appliance. The Note Cisco ASA 5510 and Cisco ASA 5520 adaptive security appliance look identical, containing the same back panel features and indicators. The Cisco ASA 5550 has a fixed configuration with an embedded 4GE slot as shown in Figure 1-3.
  • Page 12: Product Overview

    1. The management 0/0 interface is a Fast Ethernet interface designed for management traffic only. 2. Not supported at this time. 3. GigabitEthernet interfaces, from right to left, GigabitEthernet 0/0, GigabitEthernet 0/1, GigabitEthernet 0/2, and GigabitEthernet 0/3. Cisco ASA 5500 Series Hardware Installation Guide OL-10089-01...
  • Page 13 Product Overview 4. The RJ-45 Auxiliary port (labeled AUX on the chassis) is reserved for internal use at Cisco. The port is not functional in shipping versions of the chassis; therefore, customers cannot connect to this port to run the adaptive security appliance CLI.
  • Page 14 Not lit 10 Mbps Green 100 Mbps Amber 1000 Mbps The Cisco ASA 5510 adaptive security appliance supports only 10/100BaseTX. The Cisco ASA 5520 Note and the Cisco ASA 5540 support 1000BaseT. Cisco ASA 5500 Series Hardware Installation Guide OL-10089-01...
  • Page 15: Memory Requirements

    Flash memory to the unit with the smaller Flash memory will fail. For more information, see the Cisco Security Appliance Command Line Configuration Guide. Memory Requirements for Software Version 8.3 and Later For information on memory requirements for the adaptive security appliance for software Version 8.3 or...
  • Page 16 Chapter 1 Overview Memory Requirements Cisco ASA 5500 Series Hardware Installation Guide OL-10089-01...
  • Page 17: Chapter 2 Preparing For Installation

    The information in this guide applies to the following Cisco ASA 5500 series Adaptive Security Appliance models: Cisco ASA 5510, Cisco ASA 5520, Cisco ASA 5540, and Cisco ASA 5550. In this guide, references to “Cisco ASA 5500 series Adaptive Security Appliance” and “adaptive security appliance”...
  • Page 18: Safety Recommendations

    If you need to remove the chassis cover to install a hardware component, such as additional memory or Note an interface card, doing so does not affect your Cisco warranty. Upgrading the adaptive security appliance does not require any special tools and does not create any radio frequency leaks.
  • Page 19: Preventing Electrostatic Discharge Damage

    • Install the adaptive security appliance in compliance with local and national electrical codes as listed in the Regulatory Compliance and Safety Information for the Cisco ASA 5500 Series document. • The adaptive security appliance models equipped with AC-input power supplies are shipped with a 3-wire electrical cord with a grounding-type plug that fits only a grounding-type power outlet.
  • Page 20: General Site Requirements

    An open chassis allows air leaks, which may interrupt and redirect the flow of cooling air from the internal components. Power Supply Considerations For information on power supply considerations including environmental operating ranges and power requirements, see table 7 at the following url: http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900a ecd802930c5.html Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 21 Chapter 2 Preparing for Installation General Site Requirements The following chassis models can have either an AC or DC power supply: Cisco ASA 5510, Cisco ASA 5520, Cisco ASA 5540, and Cisco ASA 5550. Observe the following considerations: Check the power at the site before installing the chassis to ensure that the power is “clean” (free of •...
  • Page 22: Configuring Equipment Racks

    8.2 ft (2.5 m) 250 VAC, 10 A (37-0863-01) South Africa AIR-PWR-CORD-SA 8.2 ft (2.5 m) 250 VAC, 10 A (37-0346-01) Configuring Equipment Racks For information on physical specifications, see table 7 at the following url: Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 23 Baffles can help to isolate exhaust air from intake air, which also helps to draw cooling air through • the chassis. The best placement of the baffles depends on the airflow patterns in the rack. Experiment with different arrangements to position the baffles effectively. Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 24 Chapter 2 Preparing for Installation General Site Requirements Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 25: Chapter 3 Installing The Adaptive Security Appliance

    This section contains the following topics: • Rack-Mounting the Chassis, page 3-2 Setting the Chassis on a Desktop, page 3-3 • • Connecting the Interface Cables, page 3-4 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 26: Rack-Mounting The Chassis

    The part number for ordering a rack-mount kit for the Cisco ASA 5510, Cisco ASA 5520, Cisco ASA 5540, and Cisco ASA 5550 is ASA5500-HW=. To rack-mount the chassis, perform the following steps: Step 1 Attach the rack-mount brackets to the chassis using the supplied screws.
  • Page 27: Setting The Chassis On A Desktop

    Place the chassis upside down, on a smooth, flat surface. Step 2 Peel off the rubber feet from the black adhesive strip and press them adhesive-side down onto the bottom four Step 3 corners of the chassis, see Figure 3-4. Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 28: Connecting The Interface Cables

    LAN-based failover link by using a dedicated switch with no hosts or routers on the link or by using a crossover Ethernet cable to link the units directly. For more information, see the Cisco Security Appliance Command Line Configuration Guide.
  • Page 29 Installing the Adaptive Security Appliance Installing the Adaptive Security Appliance The RJ-45 Auxiliary port (labeled AUX on the chassis) is reserved for internal use at Cisco. The port is Note not functional in shipping versions of the chassis; therefore, customers cannot connect to this port to run the adaptive security appliance CLI.
  • Page 30 Connect the other end of the cable, the DB-9 connector, to the console port on your computer. Figure 3-6 Connecting to the Console Cable FLASH 1 RJ-45 Console port RJ-45 to DB-9 console cable Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 31 Note same time. Use the media-type command in interface configuration mode to set the media type to copper or fiber Gigabit Ethernet. For a complete description of the command syntax, see the Cisco ASA 5500 Series Command Reference. SFP modules •...
  • Page 32 LN K S P D C is c o S S M -4 LC connector SFP module Connect the other end to your network devices, such as routers, switches, or hubs. – Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 33 SSMs are optional, this connection is necessary only if you have installed an SSM on the Note adaptive security appliance. Figure 3-10 Connecting to the Management Port SSM management port 2 RJ-45 to RJ-45 cable Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 34 Connect the power cord to the adaptive security appliance and plug the other end to the power source. Step 4 For information on powering on a DC model, see the “Installing the DC Model” section on page 4-7. Power on the chassis. Step 5 Cisco ASA 5500 Series Hardware Installation Guide 3-10 78-17989-01...
  • Page 35: Removing And Replacing The Chassis Cover

    Removing the Chassis Cover To remove the chassis cover, perform the following steps: Removing the chassis cover does not affect Cisco warranty. Upgrading the adaptive security appliance Note does not require any special tools and does not create any radio frequency leaks.
  • Page 36: C H A P T E R 4 Maintenance And Upgrade Procedures

    To replace the chassis cover, perform the following steps: Place the chassis on a secure surface with the front panel facing you. Step 1 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 37: Working In An Esd Environment

    ESD voltages. To guard against ESD damage and shocks, the wrist strap and cord must operate properly. If no wrist strap is available, ground yourself by touching the metal part of the chassis. Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 38: Removing And Replacing A Lithium Battery In The Ssm

    “Installing and Replacing the Intelligent SSM” section on page 4-20 Step 4 for more information. Place the chassis in an ESD-controlled environment. See the “Working in an ESD Environment” section Step 5 on page 4-3 for more information. Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 39 Unlatch the plug, then grasp the sides of the power connector and pull upward while rocking the connector Step 8 from side to side. Disconnect the power connector from the system board as shown in Figure 4-6. Figure 4-6 Disconnecting the Power Connector AC power supply Power connector Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 40: Replacing The Ac Power Supply

    Insert the new power supply into place and slide it towards the back of the adaptive adaptive security Step 1 appliance. Lift the rear of the adaptive adaptive security appliance from the surface and reinstall both screws. Step 2 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 41: Installing The Dc Model

    The DC return connection should remain isolated from the system frame and chassis (DC-I). This Note equipment is suitable for connection to intra-building wiring only. To install the DC power model, perform the following steps: Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 42 Maintenance and Upgrade Procedures Installing the DC Model Read the Regulatory Compliance and Safety Information for the Cisco ASA 5500 Series document. Step 1 Terminate the DC input wiring on a DC source capable of supplying at least 15 amps. A 15-amp circuit Step 2 breaker is required at the 48 VDC facility power source.
  • Page 43 Power on the adaptive security appliance from the switch at the rear of the chassis. Step 12 If you need to power cycle the DC adaptive security appliance, wait at least 5 seconds between Note powering off the adaptive security appliance and powering it back on. Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 44: Removing And Replacing The Compactflash

    CompactFlash. Otherwise, use sliding pressure with your thumb or finger to slide the CompactFlash out of its connector. Figure 4-11 Removing the System CompactFlash 1 System CompactFlash Cisco ASA 5500 Series Hardware Installation Guide 4-10 78-17989-01...
  • Page 45: Removing And Replacing The Compactflash

    Push the system CompactFlash inward until it is fully seated in the connector, see Figure 4-12. Figure 4-12 Replacing the System CompactFlash System CompactFlash Step 9 Replace the adaptive security appliance cover. Step 10 Reinstall the network interface cables. Cisco ASA 5500 Series Hardware Installation Guide 4-11 78-17989-01...
  • Page 46: Step

    4-15. If this is the case, skip Step 3 and go to Step Figure 4-14 Release Button Fully Extended—Type A F L A S H User CompactFlash in the slot Release button fully extended Cisco ASA 5500 Series Hardware Installation Guide 4-12 78-17989-01...
  • Page 47 CompactFlash into the slot until the card is seated in the connector. The user CompactFlash is keyed so it cannot be inserted the wrong way. The release button will remain extended when you insert the CompactFlash see Figure 4-13. Cisco ASA 5500 Series Hardware Installation Guide 4-13 78-17989-01...
  • Page 48: Installing And Replacing The 4Ge Ssm

    Note same time. Use the media-type command in interface configuration mode to set the media type to copper or fiber Gigabit Ethernet. For a complete description of the command syntax, see the Cisco ASA 5500 Series Command Reference. This section describes how to install and replace the 4GE SSM in the adaptive security appliance, and...
  • Page 49: Installing The 4Ge Ssm

    Inserting the 4GE SSM into the Slot LN K SP D C is co FL AS H S S M -4 LI NK SP D LI NK SP D LI NK SP D LI NK SP D Cisco ASA 5500 Series Hardware Installation Guide 4-15 78-17989-01...
  • Page 50: Replacing The 4Ge Ssm

    Removing the SFP Module, page 4-19 • SFP Module The adaptive security appliance uses a field-replaceable SFP module to establish Gigabit connections. Table 4-2 lists the SFP modules that are supported by the adaptive security appliance. Cisco ASA 5500 Series Hardware Installation Guide 4-16 78-17989-01...
  • Page 51 200 Mhz-km 500 Mhz-km Use only Cisco certified SFP modules on the adaptive security appliance. Each SFP module has an internal serial EEPROM that is encoded with security information. This encoding provides a way for Cisco to identify and validate that the SFP module meets the requirements for the adaptive security appliance.
  • Page 52: Installing The Sfp Module

    Step 3 The latching mechanism used on many SFPs locks them into place when cables are connected. Do not Caution pull on the cabling in an attempt to remove the SFP. Cisco ASA 5500 Series Hardware Installation Guide 4-18 78-17989-01...
  • Page 53: Removing The Sfp Module

    SFP. Figure 4-21 Disconnecting SFP Latch Mechanisms Mylar tab Actuator/Button Bale-clasp Plastic collar Grasp the SFP on both sides and remove it from the port. Step 3 Cisco ASA 5500 Series Hardware Installation Guide 4-19 78-17989-01...
  • Page 54: Installing And Replacing The Intelligent Ssm

    Installing and Replacing the Intelligent SSM The Cisco ASA 5510, Cisco ASA 5520, Cisco ASA 5540 support the AIP SSM and the CSC SSM, also referred to as the intelligent SSM in this document.The AIP SSM runs advanced IPS software that provides security inspection.
  • Page 55: Overview

    Green 100 MB Indicates a 100MB connection. Amber 1000 MB (GigE) Indicates a 1000MB connection. Figure 4-23 lists the AIP/CSC SSM 40 LEDs. Figure 4-23 AIP/CSC SSM LEDs CISCO ASA SSM-40 Cisco ASA 5500 Series Hardware Installation Guide 4-21 78-17989-01...
  • Page 56: Installing And Replacing The Aip/Csc Ssm

    Step 3 Figure 4-24. Figure 4-24 Removing the Screws from the Slot Cover FL AS H LI NK SP D LI NK SP D LI NK SP D LI NK SP D Cisco ASA 5500 Series Hardware Installation Guide 4-22 78-17989-01...
  • Page 57: Replacing The Aip/Csc Ssm

    This section describes how to upgrade the memory in the adaptive security appliance. The section includes the following topics: Overview, page 4-24 • Removing and Installing the DIMM, page 4-25 • Cisco ASA 5500 Series Hardware Installation Guide 4-23 78-17989-01...
  • Page 58 Cisco ASA 5520/40 The memory upgrade kits, ASA5520-MEM-2GB=, and the ASA5540-MEM-2GB= allows you to upgrade the Cisco ASA 5520 and your Cisco ASA 5540 respectively. To see how much memory your adaptive security appliance has, use the show version command.
  • Page 59: Removing The Dimm

    In both cases, remove the existing DIMM, and replace it with the new one. For memory upgrade in the Cisco ASA 5510 with four memory sockets, use slot 1 - P13 and note that only one slot must be populated at all times.
  • Page 60 Chapter 4 Maintenance and Upgrade Procedures Upgrading Memory in the Adaptive Security Appliance Figure 4-26 System Memory Location in the Cisco ASA 5510 DIMM Memory Controller Hub (MCH) CompactFlash socket Cisco ASA 5500 Series Hardware Installation Guide 4-26 78-17989-01...
  • Page 61 Maintenance and Upgrade Procedures Upgrading Memory in the Adaptive Security Appliance Figure 4-27 System Memory Location in the Cisco ASA 5520 and the Cisco ASA 5540 DIMM All ASA-5520s and ASA-5540s manufactured before August 2011 have 4 DIMM sockets. Note ASA-5520s and ASA-5540s manufactured after this date have 2 DIMM sockets.
  • Page 62: Installing The Dimm

    Step 4 latches rotate to the close position against the DIMM. For memory upgrade in the Cisco ASA 5510 with four memory sockets, use slot 1 - P13 and note Note that only one slot must be populated at all times.
  • Page 63 Cisco ASA 5510 You can verify that the memory upgrade has been completed successfully by entering the show version command, the example below is for the Cisco ASA 5510 chassis: hostname# show version Cisco Adaptive Security Appliance Software Version 8.0(4) Device Manager Version 6.1(5)
  • Page 64 Config file at boot was "disk0:/main_backup.cfg" hostname up 2 days 10 hours failover cluster up 2 days 11 hours Hardware: ASA5520, 2 GB RAM, CPU Pentium 4 Celeron 2000 MHz BIOS Flash M50FW016 @ 0xffe00000, 2048KB Cisco ASA 5500 Series Hardware Installation Guide 4-30 78-17989-01...
  • Page 65: Appendix

    MDI to an MDI port, or an MDI-X to an MDI-X port. Figure 1-1 shows the 10BaseT and the 100BaseTX connector (RJ-45). Figure 1-1 10/100 Port Pinouts Label 4 5 6 7 8 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 66: Appendix 1 Cable Pinout

    Cisco products use the following types of RJ-45 cables: Straight-through • Crossover • Note Cisco does not provide these cables; they are widely available from other sources. Figure 1-3 shows the RJ 45 cable. Figure 1-3 RJ-45 Cable 8 7 6 5 4 3 2 1...
  • Page 67 Crossover—The first (far left) colored wire at one end of the cable is the third colored wire at the other end of the cable. Table 1-1 lists the rolled (console) cable pinouts for RJ-45. Table 1-1 RJ-45 Rolled (Console) Cable Pinouts Signal Pin Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 68 UTP cable to connect the management port to an external hub, switch, or router. Table 1-3 lists the cable pinouts for 10/100BASE-T Management Port Cable Pinouts (MDI). Table 1-3 10/100BASE-T Management Port Cable Pinouts (MDI) Signal Not used Not used Not used Not used Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 69 Table 1-5 SFP Port Cabling Specifications Cisco Product Wavelength Core Size Number (nanometer) (micron) Baud Rate Cable Distance GLC-SX-MM= 62.5 1.0625 300 m 50.0 1.0625 500 m GLC-LH-SM= 1300 1.0625 10 km Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 70 Appendix 1 Cable Pinouts SFP Fiber Ports Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
  • Page 71: I N D E X

    Cisco warranty CompactFlash External 1-2, 1-3 Internal 4-10, 4-12 Console port LC connector LEDs 1-4, 4-14, 4-21 electrostatic discharge memory requirements see ESD MGMT 1-2, 1-3, 3-5 equipment racks tips Cisco ASA 5500 Series Hardware Installation Guide IN-1 78-17989-01...
  • Page 72 RJ-45 port rubber feet attaching safety Serial Console port 1-2, 1-3 3-7, 4-16 site environment 3-9, 4-4 4GE SSM connecting installing 4-15, 4-22 LEDs 1-3, 4-14 replacing 4-16, 4-23 ventilation fans Cisco ASA 5500 Series Hardware Installation Guide IN-2 78-17989-01...

Table of Contents