Cisco ASA5500-HW - Hardware Accessory Kit Network Device Hardware Installation Manual
  1. Manuals
  2. Brands
  3. Cisco Manuals
  4. Chassis
  5. ASA5500-HW - Hardware Accessory Kit Network...
  6. Hardware installation manual

Cisco ASA5500-HW - Hardware Accessory Kit Network Device Hardware Installation Manual

Asa 5500-x series
Hide thumbs
Table of Contents

Advertisement

Quick Links

Enlarged version
Cisco ASA 5500-X Series Hardware
Installation Guide
for the Cisco ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X Chassis
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Text Part Number: N/A

Advertisement

Table of Contents
loading

Related Manuals for Cisco ASA5500-HW - Hardware Accessory Kit Network Device

Summary of Contents for Cisco ASA5500-HW - Hardware Accessory Kit Network Device

  • Page 1 Cisco ASA 5500-X Series Hardware Installation Guide for the Cisco ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X Chassis Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883...
  • Page 2 OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks.

  • Page 3: Table Of Contents

    Installing the Adaptive Security Appliance Rack-Mounting the Chassis Setting the Chassis on a Desktop Connecting the Interface Cables Maintenance and Upgrade Procedures C H A P T E R Removing and Replacing the Chassis Cover Cisco ASA 5500-X Series Hardware Installation Guide...
  • Page 4 Removing the SFP Module 4-18 Cable Pinouts A P P E N D I X 10/100/1000BaseT Connectors Console Port (RJ-45) RJ-45 to DB-9 MGMT 10/100/1000 Ethernet Port Gigabit and Fibre Channel Ports N D E X Cisco ASA 5500-X Series Hardware Installation Guide...

  • Page 5: About This Guide

    This guide describes how to install and maintain the Cisco ASA 5500-X series appliances. Information in this guide applies to the following Cisco ASA 5500-X Series models: ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X. References to “Cisco ASA 5500-X Series” and “ASA”...
  • Page 6 Selecting a menu item (or pane) is indicated by the following convention: • Choose Start > Settings > Control Panel. Means reader take note. Notes contain helpful suggestions or references to material not covered in the Note manual. Cisco ASA 5500-X Series Hardware Installation Guide...
  • Page 7 Before working on equipment that is connected to power lines, remove jewelry (including rings, Warning necklaces, and watches). Metal objects will heat up when connected to power and ground and can cause serious burns or weld the metal object to the terminals. Statement 43 Cisco ASA 5500-X Series Hardware Installation Guide...
  • Page 8 This equipment must be grounded. Never defeat the ground conductor or operate the equipment in the Warning absence of a suitably installed ground conductor. Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available. Statement 1024 Cisco ASA 5500-X Series Hardware Installation Guide viii...
  • Page 9 Before working on a chassis or working near power supplies, unplug the power cord on AC units. Warning Statement 246 TN Power Warning The device is designed to work with TN power systems. Statement 19 Warning Cisco ASA 5500-X Series Hardware Installation Guide...
  • Page 10 Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place. Statement Cisco ASA 5500-X Series Hardware Installation Guide...

  • Page 11: Related Documentation

    Cisco ASA 5500-X series. It also includes translations of the safety warnings used in this guide. Related Documentation For a complete list of the Cisco ASA 5500-X series documentation and where to find it, see the documentation roadmap at the following URL: http://www.cisco.com/en/US/docs/security/asa/roadmap/asaroadmap.html...
  • Page 12 About This Guide Cisco ASA 5500-X Series Hardware Installation Guide...

  • Page 13: Memory Requirements

    ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X. The Cisco ASA 5500-X series is a family of next-generation mid-range ASAs that are built on the same security platform as the rest of the ASA family. These next-generation ASAs provide more firewall throughput (4X firewall throughput), better scaling, more Ethernet ports (up to 14 GE ports), dedicated IPS acceleration hardware, and redundant power supplies on the 5545-X and 5555-X models.
  • Page 14 URL: http://www.cisco.com/en/US/docs/security/ips/7.1/roadmap/19889_01.html External USB Support The Cisco ASA 5500-X series chassis have internal and external USB drives that use FAT32 file system. Internal USB Drives Embedded USB (eUSB) devices are used as the internal flash (disk0).

  • Page 15: Memory Requirements

    Management interface, so for per-context management, you must connect to a data interface. The Management 0/0 interface is configured for ASDM access as part of the default factory configuration. For more information, see the “Rear Panel Ports” section on page 1-9. Cisco ASA 5500-X Series Hardware Installation Guide...
  • Page 16 ASA 5500-X I/O Cards The Cisco ASA 5500-X Series 6-port Gigabit Ethernet interface cards extend the I/O capabilities of the ASA 5525-X, ASA 5545-X, and ASA 5555-X models by providing additional Gigabit Ethernet ports. The I/O cards provide the following benefits: Segmentation of network traffic into separate security zones •...
  • Page 17 ASA Chassis Overview ASA Chassis Panels Front Panel LEDs This section describes the front panel LEDs for the Cisco ASA 5500-X series chassis. Figure 1-1 shows the front panel LEDs for the ASA 5512-X, ASA 5515-X, and ASA 5525-X models.
  • Page 18 Off—Power-up diagnostics are not operational. Figure 1-2 shows the front panel LEDs for the ASA 5545-X and ASA 5555-X models. Figure 1-2 Front Panel LEDs for Cisco ASA 5545-X and ASA 5555-X Cisco ASA 5545 Adapative Security Appliance BOOT ALARM...
  • Page 19 • Off—Failover pair is not operational. Boot Indicates power-up diagnostics: Flashing green—Power-up diagnostics are running, or system • is booting. Solid green—System has passed power-up diagnostics. • Off—Power-up diagnostics are not operational. • Cisco ASA 5500-X Series Hardware Installation Guide...
  • Page 20 Indicates the status of the failover pair: Solid green—Failover pair is operating normally. • Off—Failover pair is not operational. • Indicates VPN tunnel status: Solid green—VPN tunnel is established. • Off—No VPN tunnel is established. • Cisco ASA 5500-X Series Hardware Installation Guide...
  • Page 21 Off—No hard disk drive present. • Rear Panel Ports This section describes the rear panel ports on the Cisco ASA 5500-X series chassis. Figure 1-4 shows the ports for the ASA 5512-X, ASA 5515-X, and ASA 5525-X models. Figure 1-4...
  • Page 22 USB ports Indicates the two USB standard ports. (See the “External USB Support” section on page 1-2.) Console port Indicates the console port that directly connects a computer to the ASA. Cisco ASA 5500-X Series Hardware Installation Guide 1-10...
  • Page 23 ASA Chassis Overview Hardware Specifications Hardware Specifications Table 1-2 contains hardware specifications for the ASA 5500-X series models. Table 1-2 Hardware Specifications for the Cisco ASA 5500-X series ASA 5512-X ASA 5515-X ASA 5525-X ASA 5545-X ASA 5555-X Physical Specifications...
  • Page 24 Chapter 1 ASA Chassis Overview Hardware Specifications For additional specifications on the ASA 5525-X ASA 5545-X and ASA 5555-X models, see the product data sheet at the following URL: http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/data_sheet_c78-701808. html Cisco ASA 5500-X Series Hardware Installation Guide 1-12...

  • Page 25: Overview

    The information in this guide applies to the following Cisco ASA 5500-X series models: ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X. In this guide, references to “Cisco ASA 5500-X series ” and “ASA” apply to all models unless specifically noted otherwise.

  • Page 26: Chapter 2 Preparing For Installation

    If you need to remove the chassis cover to install a hardware component, such as additional memory or an interface card, doing so does not affect your Cisco warranty. Upgrading the ASA does not require any special tools and does not create any radio frequency leaks.

  • Page 27: Preventing Electrostatic Discharge Damage

    ESD voltages. To guard against ESD damage and shocks, the wrist strap and cord must operate properly. If no wrist strap is available, ground yourself by touching the metal part of the chassis. Cisco ASA 5500-X Series Hardware Installation Guide...

  • Page 28: General Site Requirements

    Ensure that the chassis cover is secure. The chassis is designed to allow cooling air to flow effectively within it. An open chassis allows air leaks, which may interrupt and redirect the flow of cooling air from the internal components. Cisco ASA 5500-X Series Hardware Installation Guide...

  • Page 29: Power Supply Considerations

    Power Supply Considerations The Cisco ASA 5500-X series hardware operates on AC power and supports the ability to restore the previous power state of the system in the event that AC power is lost. Be aware of the following when...
  • Page 30 CAB-JPN 8.2 ft (2.5 m) 250 VAC, 10 A (72-1925-01) India CAB-IND-10A 8.2 ft (2.5 m) 250 VAC, 10 A (37-0863-01) South Africa AIR-PWR-CORD-S 8.2 ft (2.5 m) 250 VAC, 10 A (37-0346-01) Cisco ASA 5500-X Series Hardware Installation Guide...

  • Page 31: Configuring Equipment Racks

    Baffles can help to isolate exhaust air from intake air, which also helps to draw cooling air through • the chassis. The best placement of the baffles depends on the airflow patterns in the rack. Experiment with different arrangements to position the baffles effectively. Cisco ASA 5500-X Series Hardware Installation Guide...
  • Page 32 Chapter 2 Preparing for Installation General Site Requirements Cisco ASA 5500-X Series Hardware Installation Guide...
  • Page 33 Note Use the rack mount brackets to mount the Cisco ASA 5512, ASA 5515, and ASA 5525 to a rack. Use the slide rail mounting system to mount the Cisco ASA 5545 and ASA 5555 to a rack.
  • Page 34 5500-X series chassis, as well. For instructions about using the slide rail mounting system, see the Slide Rail Installation Instructions for Cisco IronPort C170, M170, and S170 Appliances and Cisco 5512-X, 5515-X, 5525-X, 5545-X, 5555-X Adaptive Security Appliances and Cisco IPS 4345 and 4360 at the following location: http://www.cisco.com/en/US/docs/security/asa/roadmap/asaroadmap.html#wp57708...
  • Page 35 You can configure any interface to be a management-only interface using the management-only Note command. You can also disable management-only mode on the management interface. For more information about this command, see the management-only command in the Cisco ASA Command Reference for your software version at http://www.cisco.com/go/asadocs.
  • Page 36 Chapter 3 Installing and Connecting the ASA Connecting the Interface Cables and Verifying Connectivity Cisco ASA 5500-X Series Hardware Installation Guide...

  • Page 37: Removing And Replacing The Chassis Cover

    This chapter includes the following sections: Removing and Replacing the Chassis Cover, page 4-1 • Installing an I/O Card in the Cisco ASA 5512-X, 5515-X, and 5525-X Chassis, page 4-3 • • Installing an I/O Card in the Cisco ASA 5545-X and 5555-X Chassis, page 4-7 Removing and Installing the Power Supply, page 4-11 •...

  • Page 38: C H A P T E R 4 Maintenance And Upgrade Procedures

    Step 1 Step 2 Lower the front of the chassis cover onto the chassis, slide it forward until it fits into place, and tighten the thumbscrew to secure the chassis cover. (See Figure 4-2.) Cisco ASA 5500-X Series Hardware Installation Guide...

  • Page 39: Installing An I/O Card In The Cisco Asa 5512-X, 5515-X, And 5525-X Chassis

    Chapter 4 Maintenance and Upgrade Procedures Installing an I/O Card in the Cisco ASA 5512-X, 5515-X, and 5525-X Chassis Figure 4-2 Replacing the Chassis Cover Thumbscrew Reinstall the chassis on a rack. Step 3 Reinstall the network interface cables. Step 4 Power on the chassis.
  • Page 40 Chapter 4 Maintenance and Upgrade Procedures Installing an I/O Card in the Cisco ASA 5512-X, 5515-X, and 5525-X Chassis Figure 4-3 I/O Card Location I/O Card holder Power supply You must disconnect the blue Regex flexible circuit connector from the motherboard before removing Caution the I/O card from the chassis.
  • Page 41 Chapter 4 Maintenance and Upgrade Procedures Installing an I/O Card in the Cisco ASA 5512-X, 5515-X, and 5525-X Chassis Step 7 Disconnect the blue Regex cable connector from the motherboard by lifting carefully but firmly. (See Figure 4-5.) Figure 4-5...
  • Page 42 Chapter 4 Maintenance and Upgrade Procedures Installing an I/O Card in the Cisco ASA 5512-X, 5515-X, and 5525-X Chassis Figure 4-6 Lift the I/O Card Upward to Release it Index finger placement Thumb placement Insert the new I/O card into the chassis. (See Figure 4-7.) The I/O card fits properly if the following...

  • Page 43: Installing An I/O Card In The Cisco Asa 5545-X And 5555-X Chassis

    Chapter 4 Maintenance and Upgrade Procedures Installing an I/O Card in the Cisco ASA 5545-X and 5555-X Chassis Connect the blue connector end of the Regex ribbon cable to the motherboard, and close the green tab. Step 10 Install the chassis cover, and replace the chassis in the rack.
  • Page 44 Chapter 4 Maintenance and Upgrade Procedures Installing an I/O Card in the Cisco ASA 5545-X and 5555-X Chassis Figure 4-9 Removing the Connector Clamp PUSH AND LIFT TAB Cisco ASA 5500-X Series Hardware Installation Guide...
  • Page 45 Chapter 4 Maintenance and Upgrade Procedures Installing an I/O Card in the Cisco ASA 5545-X and 5555-X Chassis Step 7 Disconnect the blue connector from the board by lifting carefully but firmly. (See Figure 4-10.) Figure 4-10 Removing the Regex Cable Connector...
  • Page 46 Chapter 4 Maintenance and Upgrade Procedures Installing an I/O Card in the Cisco ASA 5545-X and 5555-X Chassis Step 9 Insert the new I/O card into the chassis. (See Figure 4-12.) The I/O card holder fits properly if the following criteria are met: The PCIe bus is properly inserted on the motherboard.

  • Page 47: Removing And Installing The Power Supply

    Save the slot cover for future use. (See Figure 4-14.) Continue with Step 3. Figure 4-14 Remove the Power Supply Slot Cover Cisco ASA 5500-X Series Hardware Installation Guide 4-11...
  • Page 48 On the back panel of the appliance, make sure the power supply indicators for PS0 and PS1 on the bottom Step 7 of each installed power supply are green. (See Figure 4-17.) Cisco ASA 5500-X Series Hardware Installation Guide 4-12...

  • Page 49: Sfp Module

    Verify Power Indicators are Green Installing and Removing the SFP Modules The SFP module is a hot-swappable input/output device that plugs into the SFP ports. The Cisco ASA 5500-X series chassis support the following SFP module types: Long wavelength/long haul 1000BASE-LX/LH (GLC-LH-SM=) •...

  • Page 50: Installing And Removing The Sfp Modules

    200 Mhz-km 500 Mhz-km Use only Cisco certified SFP modules on the ASA. Each SFP module has an internal serial EEPROM that is encoded with security information. This encoding provides a way for Cisco to identify and validate that the SFP module meets the requirements for the ASA.

  • Page 51: Step 1

    Plastic Collar Module • Latch designs are not linked to SFP model or technology types. For information about SFP models and Note technology types, see the label on the side of your SFP. Cisco ASA 5500-X Series Hardware Installation Guide 4-15...

  • Page 52: Installing And Removing The Sfp Modules

    Disconnect your particular SFP latch, as shown in Figure 4-19. Step 2 Figure 4-19 Disconnecting SFP Latch Mechanisms Mylar tab Actuator/Button Bale-clasp Plastic collar Step 3 Grasp the SFP on both sides, and remove it from the port. Cisco ASA 5500-X Series Hardware Installation Guide 4-16...

  • Page 53: Baset Connectors

    MDI to an MDI port, or an MDI-X to an MDI-X port. Figure 5-1 shows the 10BaseT and the 100BaseTX connector (RJ-45). Figure 5-1 10/100 Port Pinouts Label 4 5 6 7 8 Cisco ASA 5500-X Series Hardware Installation Guide...

  • Page 54: Console Port (Rj-45)

    Cisco products use the following types of RJ-45 cables: Straight-through • Crossover • Note Cisco does not provide these cables, yet they are widely available from other sources. Figure 5-3 shows the RJ 45 cable. Figure 5-3 RJ-45 Cable 8 7 6 5 4 3 2 1...
  • Page 55 RJ-45 Rolled (Console) Cable Pinouts Signal Pin RJ-45 to DB-9 Table 5-2 lists the cable pinouts for RJ-45 to DB-9 or DB-25. Table 5-2 Cable Pinouts for RJ-45 to DB-9 or DB-25 Signal RJ-45 Pin DB-9 Pin Cisco ASA 5500-X Series Hardware Installation Guide...

  • Page 56: Rj-45 To Db-9

    Types of SFP Modules and Connectors Port Compliance Connector Fiber Type Gigabit Ethernet 1000BASE-SX 1000BASE-LX Table 5-5 lists the SFP port cabling specifications for the SFP modules and connectors used in the ASA. Cisco ASA 5500-X Series Hardware Installation Guide...

  • Page 57: Gigabit And Fibre Channel Ports

    Gigabit and Fibre Channel Ports Table 5-5 SFP Port Cabling Specifications Cisco Product Wavelength Core Size Number (nanometer) (micron) Baud Rate Cable Distance GLC-SX-MM= 62.5 1.0625 300 m 50.0 1.0625 500 m GLC-LH-SM= 1300 1.0625 10 km Cisco ASA 5500-X Series Hardware Installation Guide...
  • Page 58 Appendix 5 Identifying Cable Pinouts Gigabit and Fibre Channel Ports Cisco ASA 5500-X Series Hardware Installation Guide...
  • Page 59 Cisco warranty interface cables Console port auxiliary port connecting console port management port data sheet 5512-X and 5515-X 1-11 5525-X, 5545-X, 5555-X 1-12 MGMT electrostatic discharge see ESD panel equipment racks removing Cisco ASA 5500-X Series Hardware Installation Guide IN-1...
  • Page 60 5512-X, 5515-X, 5525-X 5545-X, 5555-X redundant power option 4-11 RJ-45 connector pinouts safety SFP module cabling requirements 4-14 installing and removing 4-13 supported modules 4-13 site environment ventilation fans warranty Cisco ASA 5500-X Series Hardware Installation Guide IN-2...

This manual is also suitable for:

Asa 5512-xAsa 5515-xAsa 5525-xAsa 5545-xAsa 5555-x

Table of Contents