Page 1
Cisco ASA 5500 Series Hardware Installation Guide For the ASA 5510, ASA 5520, ASA 5540, and ASA 5550 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883...
Page 2
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks.
Installing the Adaptive Security Appliance Rack-Mounting the Chassis Setting the Chassis on a Desktop Connecting the Interface Cables Maintenance and Upgrade Procedures C H A P T E R Removing and Replacing the Chassis Cover Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Page 4
Overview 4-20 Installing and Replacing the AIP/CSC SSM 4-21 Installing the AIP/CSC SSM 4-21 Replacing the AIP/CSC SSM 4-22 Upgrading Memory for the Cisco ASA 5510 4-22 Removing the DIMM 4-23 Installing the DIMM 4-25 4-26 Cable Pinouts A P P E N D I X...
Document Objectives This guide describes how to perform installation and maintenance procedures on the Cisco ASA 5500 Series Adaptive Security Appliances. The information in this guide applies to the following Cisco ASA 5500 Series Adaptive Security Appliance models: Cisco ASA 5510, Cisco ASA 5520, Cisco ASA 5540, and Cisco ASA 5550.
Installation Warnings Be sure to read the Regulatory Compliance and Safety Information for the Cisco ASA 5500 Series document that accompanied this device before installing the chassis. This document contains important safety information. This section includes the following warnings: •...
Page 7
Do not work on the system or connect or disconnect cables during periods of lightning activity. Warning Statement 1001 Installation Instructions Warning Read the installation instructions before connecting the system to the power source. Statement 1004 Warning Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Page 8
Statement 1029 Product Disposal Warning Ultimate disposal of this product should be handled according to all national laws and regulations. Warning Statement 1040 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Page 9
This product relies on the building’s installation for short-circuit (overcurrent) protection. Ensure that Warning a fuse or circuit breaker no larger than 120 VAC, 15A U.S. (240 VAC, 10A international) is used on the phase conductors (all current-carrying conductors). Statement 13 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Cisco technical documentation, at: http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html Subscribe to the What’s New in Cisco Product Documentation as an RSS feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service. Cisco currently supports RSS Version 2.0.
The illustrations in this chapter show the Cisco ASA 5540 adaptive security appliance. The Note Cisco ASA 5510 and Cisco ASA 5520 adaptive security appliance look identical, containing the same back panel features and indicators. The Cisco ASA 5550 has a fixed configuration with an embedded 4GE slot as shown in Figure 1-3.
1. The management 0/0 interface is a Fast Ethernet interface designed for management traffic only. 2. Not supported at this time. 3. GigabitEthernet interfaces, from right to left, GigabitEthernet 0/0, GigabitEthernet 0/1, GigabitEthernet 0/2, and GigabitEthernet 0/3. Cisco ASA 5500 Series Hardware Installation Guide OL-10089-01...
Page 13
Product Overview 4. The RJ-45 Auxiliary port (labeled AUX on the chassis) is reserved for internal use at Cisco. The port is not functional in shipping versions of the chassis; therefore, customers cannot connect to this port to run the adaptive security appliance CLI.
Page 14
Not lit 10 Mbps Green 100 Mbps Amber 1000 Mbps The Cisco ASA 5510 adaptive security appliance supports only 10/100BaseTX. The Cisco ASA 5520 Note and the Cisco ASA 5540 support 1000BaseT. Cisco ASA 5500 Series Hardware Installation Guide OL-10089-01...
Flash memory to the unit with the smaller Flash memory will fail. For more information, see the Cisco Security Appliance Command Line Configuration Guide. Memory Requirements for Software Version 8.3 and Later For information on memory requirements for the adaptive security appliance for software Version 8.3 or...
The information in this guide applies to the following Cisco ASA 5500 series Adaptive Security Appliance models: Cisco ASA 5510, Cisco ASA 5520, Cisco ASA 5540, and Cisco ASA 5550. In this guide, references to “Cisco ASA 5500 series Adaptive Security Appliance” and “adaptive security appliance”...
If you need to remove the chassis cover to install a hardware component, such as additional memory or Note an interface card, doing so does not affect your Cisco warranty. Upgrading the adaptive security appliance does not require any special tools and does not create any radio frequency leaks.
• Install the adaptive security appliance in compliance with local and national electrical codes as listed in the Regulatory Compliance and Safety Information for the Cisco ASA 5500 Series document. • The adaptive security appliance models equipped with AC-input power supplies are shipped with a 3-wire electrical cord with a grounding-type plug that fits only a grounding-type power outlet.
An open chassis allows air leaks, which may interrupt and redirect the flow of cooling air from the internal components. Power Supply Considerations For information on power supply considerations including environmental operating ranges and power requirements, see table 7 at the following url: http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900a ecd802930c5.html Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Page 21
Chapter 2 Preparing for Installation General Site Requirements The following chassis models can have either an AC or DC power supply: Cisco ASA 5510, Cisco ASA 5520, Cisco ASA 5540, and Cisco ASA 5550. Observe the following considerations: Check the power at the site before installing the chassis to ensure that the power is “clean” (free of •...
8.2 ft (2.5 m) 250 VAC, 10 A (37-0863-01) South Africa AIR-PWR-CORD-SA 8.2 ft (2.5 m) 250 VAC, 10 A (37-0346-01) Configuring Equipment Racks For information on physical specifications, see table 7 at the following url: Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Page 23
Baffles can help to isolate exhaust air from intake air, which also helps to draw cooling air through • the chassis. The best placement of the baffles depends on the airflow patterns in the rack. Experiment with different arrangements to position the baffles effectively. Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Page 24
Chapter 2 Preparing for Installation General Site Requirements Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
This section contains the following topics: • Rack-Mounting the Chassis, page 3-2 Setting the Chassis on a Desktop, page 3-3 • • Connecting the Interface Cables, page 3-4 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
The part number for ordering a rack-mount kit for the Cisco ASA 5510, Cisco ASA 5520, Cisco ASA 5540, and Cisco ASA 5550 is ASA5500-HW=. To rack-mount the chassis, perform the following steps: Step 1 Attach the rack-mount brackets to the chassis using the supplied screws.
Place the chassis upside down, on a smooth, flat surface. Step 2 Peel off the rubber feet from the black adhesive strip and press them adhesive-side down onto the bottom four Step 3 corners of the chassis, see Figure 3-4. Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
LAN-based failover link by using a dedicated switch with no hosts or routers on the link or by using a crossover Ethernet cable to link the units directly. For more information, see the Cisco Security Appliance Command Line Configuration Guide.
Page 29
Installing the Adaptive Security Appliance Installing the Adaptive Security Appliance The RJ-45 Auxiliary port (labeled AUX on the chassis) is reserved for internal use at Cisco. The port is Note not functional in shipping versions of the chassis; therefore, customers cannot connect to this port to run the adaptive security appliance CLI.
Page 30
Connect the other end of the cable, the DB-9 connector, to the console port on your computer. Figure 3-6 Connecting to the Console Cable FLASH 1 RJ-45 Console port RJ-45 to DB-9 console cable Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Page 31
Note same time. Use the media-type command in interface configuration mode to set the media type to copper or fiber Gigabit Ethernet. For a complete description of the command syntax, see the Cisco ASA 5500 Series Command Reference. SFP modules •...
Page 32
LN K S P D C is c o S S M -4 LC connector SFP module Connect the other end to your network devices, such as routers, switches, or hubs. – Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Page 33
SSMs are optional, this connection is necessary only if you have installed an SSM on the Note adaptive security appliance. Figure 3-10 Connecting to the Management Port SSM management port 2 RJ-45 to RJ-45 cable Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Page 34
Connect the power cord to the adaptive security appliance and plug the other end to the power source. Step 4 For information on powering on a DC model, see the “Installing the DC Model” section on page 4-7. Power on the chassis. Step 5 Cisco ASA 5500 Series Hardware Installation Guide 3-10 78-17989-01...
Removing the Chassis Cover To remove the chassis cover, perform the following steps: Removing the chassis cover does not affect Cisco warranty. Upgrading the adaptive security appliance Note does not require any special tools and does not create any radio frequency leaks.
To replace the chassis cover, perform the following steps: Place the chassis on a secure surface with the front panel facing you. Step 1 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
ESD voltages. To guard against ESD damage and shocks, the wrist strap and cord must operate properly. If no wrist strap is available, ground yourself by touching the metal part of the chassis. Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
“Installing and Replacing the Intelligent SSM” section on page 4-20 Step 4 for more information. Place the chassis in an ESD-controlled environment. See the “Working in an ESD Environment” section Step 5 on page 4-3 for more information. Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Page 39
Unlatch the plug, then grasp the sides of the power connector and pull upward while rocking the connector Step 8 from side to side. Disconnect the power connector from the system board as shown in Figure 4-6. Figure 4-6 Disconnecting the Power Connector AC power supply Power connector Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Insert the new power supply into place and slide it towards the back of the adaptive adaptive security Step 1 appliance. Lift the rear of the adaptive adaptive security appliance from the surface and reinstall both screws. Step 2 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
The DC return connection should remain isolated from the system frame and chassis (DC-I). This Note equipment is suitable for connection to intra-building wiring only. To install the DC power model, perform the following steps: Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Page 42
Maintenance and Upgrade Procedures Installing the DC Model Read the Regulatory Compliance and Safety Information for the Cisco ASA 5500 Series document. Step 1 Terminate the DC input wiring on a DC source capable of supplying at least 15 amps. A 15-amp circuit Step 2 breaker is required at the 48 VDC facility power source.
Page 43
Power on the adaptive security appliance from the switch at the rear of the chassis. Step 12 If you need to power cycle the DC adaptive security appliance, wait at least 5 seconds between Note powering off the adaptive security appliance and powering it back on. Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
CompactFlash. Otherwise, use sliding pressure with your thumb or finger to slide the CompactFlash out of its connector. Figure 4-11 Removing the System CompactFlash 1 System CompactFlash Cisco ASA 5500 Series Hardware Installation Guide 4-10 78-17989-01...
Push the system CompactFlash inward until it is fully seated in the connector, see Figure 4-12. Figure 4-12 Replacing the System CompactFlash System CompactFlash Step 9 Replace the adaptive security appliance cover. Step 10 Reinstall the network interface cables. Cisco ASA 5500 Series Hardware Installation Guide 4-11 78-17989-01...
4-15. If this is the case, skip Step 3 and go to Step Figure 4-14 Release Button Fully Extended—Type A F L A S H User CompactFlash in the slot Release button fully extended Cisco ASA 5500 Series Hardware Installation Guide 4-12 78-17989-01...
Page 47
CompactFlash into the slot until the card is seated in the connector. The user CompactFlash is keyed so it cannot be inserted the wrong way. The release button will remain extended when you insert the CompactFlash see Figure 4-13. Cisco ASA 5500 Series Hardware Installation Guide 4-13 78-17989-01...
Note same time. Use the media-type command in interface configuration mode to set the media type to copper or fiber Gigabit Ethernet. For a complete description of the command syntax, see the Cisco ASA 5500 Series Command Reference. This section describes how to install and replace the 4GE SSM in the adaptive security appliance, and...
Inserting the 4GE SSM into the Slot LN K SP D C is co FL AS H S S M -4 LI NK SP D LI NK SP D LI NK SP D LI NK SP D Cisco ASA 5500 Series Hardware Installation Guide 4-15 78-17989-01...
Removing the SFP Module, page 4-19 • SFP Module The adaptive security appliance uses a field-replaceable SFP module to establish Gigabit connections. Table 4-2 lists the SFP modules that are supported by the adaptive security appliance. Cisco ASA 5500 Series Hardware Installation Guide 4-16 78-17989-01...
Page 51
200 Mhz-km 500 Mhz-km Use only Cisco certified SFP modules on the adaptive security appliance. Each SFP module has an internal serial EEPROM that is encoded with security information. This encoding provides a way for Cisco to identify and validate that the SFP module meets the requirements for the adaptive security appliance.
Step 3 The latching mechanism used on many SFPs locks them into place when cables are connected. Do not Caution pull on the cabling in an attempt to remove the SFP. Cisco ASA 5500 Series Hardware Installation Guide 4-18 78-17989-01...
SFP. Figure 4-21 Disconnecting SFP Latch Mechanisms Mylar tab Actuator/Button Bale-clasp Plastic collar Grasp the SFP on both sides and remove it from the port. Step 3 Cisco ASA 5500 Series Hardware Installation Guide 4-19 78-17989-01...
Installing and Replacing the Intelligent SSM The Cisco ASA 5510, Cisco ASA 5520, Cisco ASA 5540 support the AIP SSM and the CSC SSM, also referred to as the intelligent SSM in this document.The AIP SSM runs advanced IPS software that provides security inspection.
Step 3 Figure 4-24. Figure 4-24 Removing the Screws from the Slot Cover FL AS H LI NK SP D LI NK SP D LI NK SP D LI NK SP D Cisco ASA 5500 Series Hardware Installation Guide 4-22 78-17989-01...
This section describes how to upgrade the memory in the adaptive security appliance. The section includes the following topics: Overview, page 4-24 • Removing and Installing the DIMM, page 4-25 • Cisco ASA 5500 Series Hardware Installation Guide 4-23 78-17989-01...
Page 58
Cisco ASA 5520/40 The memory upgrade kits, ASA5520-MEM-2GB=, and the ASA5540-MEM-2GB= allows you to upgrade the Cisco ASA 5520 and your Cisco ASA 5540 respectively. To see how much memory your adaptive security appliance has, use the show version command.
In both cases, remove the existing DIMM, and replace it with the new one. For memory upgrade in the Cisco ASA 5510 with four memory sockets, use slot 1 - P13 and note that only one slot must be populated at all times.
Page 60
Chapter 4 Maintenance and Upgrade Procedures Upgrading Memory in the Adaptive Security Appliance Figure 4-26 System Memory Location in the Cisco ASA 5510 DIMM Memory Controller Hub (MCH) CompactFlash socket Cisco ASA 5500 Series Hardware Installation Guide 4-26 78-17989-01...
Page 61
Maintenance and Upgrade Procedures Upgrading Memory in the Adaptive Security Appliance Figure 4-27 System Memory Location in the Cisco ASA 5520 and the Cisco ASA 5540 DIMM All ASA-5520s and ASA-5540s manufactured before August 2011 have 4 DIMM sockets. Note ASA-5520s and ASA-5540s manufactured after this date have 2 DIMM sockets.
Step 4 latches rotate to the close position against the DIMM. For memory upgrade in the Cisco ASA 5510 with four memory sockets, use slot 1 - P13 and note Note that only one slot must be populated at all times.
Page 63
Cisco ASA 5510 You can verify that the memory upgrade has been completed successfully by entering the show version command, the example below is for the Cisco ASA 5510 chassis: hostname# show version Cisco Adaptive Security Appliance Software Version 8.0(4) Device Manager Version 6.1(5)
Page 64
Config file at boot was "disk0:/main_backup.cfg" hostname up 2 days 10 hours failover cluster up 2 days 11 hours Hardware: ASA5520, 2 GB RAM, CPU Pentium 4 Celeron 2000 MHz BIOS Flash M50FW016 @ 0xffe00000, 2048KB Cisco ASA 5500 Series Hardware Installation Guide 4-30 78-17989-01...
MDI to an MDI port, or an MDI-X to an MDI-X port. Figure 1-1 shows the 10BaseT and the 100BaseTX connector (RJ-45). Figure 1-1 10/100 Port Pinouts Label 4 5 6 7 8 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Cisco products use the following types of RJ-45 cables: Straight-through • Crossover • Note Cisco does not provide these cables; they are widely available from other sources. Figure 1-3 shows the RJ 45 cable. Figure 1-3 RJ-45 Cable 8 7 6 5 4 3 2 1...
Page 67
Crossover—The first (far left) colored wire at one end of the cable is the third colored wire at the other end of the cable. Table 1-1 lists the rolled (console) cable pinouts for RJ-45. Table 1-1 RJ-45 Rolled (Console) Cable Pinouts Signal Pin Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Page 68
UTP cable to connect the management port to an external hub, switch, or router. Table 1-3 lists the cable pinouts for 10/100BASE-T Management Port Cable Pinouts (MDI). Table 1-3 10/100BASE-T Management Port Cable Pinouts (MDI) Signal Not used Not used Not used Not used Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Page 69
Table 1-5 SFP Port Cabling Specifications Cisco Product Wavelength Core Size Number (nanometer) (micron) Baud Rate Cable Distance GLC-SX-MM= 62.5 1.0625 300 m 50.0 1.0625 500 m GLC-LH-SM= 1300 1.0625 10 km Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01...
Need help?
Do you have a question about the WS-C5509 and is the answer not in the manual?
Questions and answers