Quick Start Guide
Page 5
Install the chassis and connect interface cables Perform initial setup of the Cisco ASA 5500 series adaptive security appliance: • ASA 5510, ASA 5520, and ASA 5540, page 1-1 • ASA 5550, page 1-2 • ASA 5580, page 1-3 • ASA 5585-X, page 1-4 ASA 5510, ASA 5520, and ASA 5540 78-19753-01 To Do This ... 1 C H A P T E R Before You Begin Use the following table to find the installation and configuration steps...
Install the chassis and connect interface cables Perform initial setup of the Cisco ASA 5500 series adaptive security appliance: • ASA 5510, ASA 5520, and ASA 5540, page 1-1 • ASA 5550, page 1-2 • ASA 5580, page 1-3 • ASA 5585-X, page 1-4 ASA 5510, ASA 5520, and ASA 5540 78-19753-01 To Do This ... 1 C H A P T E R Before You Begin Use the following table to find the installation and configuration steps...
Quick Start Guide
Page 6
Chapter 3, "Installing the ASA 5550" Chapter 6, "Configuring the ASA" ASDM Help or ASDM user guide for your release ASA CLI configuration guide for your release Cisco ASA 5500 Series Adaptive Security Appliance Hardware Installation Guide Cisco Content Security and Control SSM Administrator Guide User Guide for your release Cisco ASA 5500 Series Quick Start Guide 1-2 78-19753-01 ASDM Help or ASDM user...
Chapter 3, "Installing the ASA 5550" Chapter 6, "Configuring the ASA" ASDM Help or ASDM user guide for your release ASA CLI configuration guide for your release Cisco ASA 5500 Series Adaptive Security Appliance Hardware Installation Guide Cisco Content Security and Control SSM Administrator Guide User Guide for your release Cisco ASA 5500 Series Quick Start Guide 1-2 78-19753-01 ASDM Help or ASDM user...
Quick Start Guide
Page 7
... Guide 1-3 Operate the system on a daily basis See ... Chapter 1 Before You Begin ASA 5580 To Do This ... ASDM Help or ASDM user guide for your release ASA CLI configuration guide for your release System Log Messages guide for your release Cisco ASA 5500 Series Adaptive Security Appliance Hardware Installation Guide ASA 5580 78-19753-01 To Do This ...
... Guide 1-3 Operate the system on a daily basis See ... Chapter 1 Before You Begin ASA 5580 To Do This ... ASDM Help or ASDM user guide for your release ASA CLI configuration guide for your release System Log Messages guide for your release Cisco ASA 5500 Series Adaptive Security Appliance Hardware Installation Guide ASA 5580 78-19753-01 To Do This ...
Quick Start Guide
Page 8
... your release ASDM Help or ASDM user guide for your release ASA CLI configuration guide for your release System Log Messages guide for your release Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide User Guide for Cisco IPS Manager Cisco ASA 5500 Series Quick Start Guide 1-4 78-19753-01 ASA 5585-X ASA 5585-X Chapter 1 Before You Begin To Do This ...
... your release ASDM Help or ASDM user guide for your release ASA CLI configuration guide for your release System Log Messages guide for your release Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide User Guide for Cisco IPS Manager Cisco ASA 5500 Series Quick Start Guide 1-4 78-19753-01 ASA 5585-X ASA 5585-X Chapter 1 Before You Begin To Do This ...
Quick Start Guide
Page 13
...powered on the front of the adaptive security appliance; The ASA 5510 and ASA 5520 chassis are identical, containing the same back panel features and indicators. Check the Status LED on . once it directly with an Ethernet cable, or connect the PC and the ASA to the console port and see ...obtain an IP address using DHCP. Chapter 2 Installing the ASA 5510, ASA 5520, or ASA 5540 Powering On the ASA Powering On the ASA Step 1 Step 2 Step 3 Step 4 Step 5 Attach the power cable to the appropriate ports. 78-19753-01 Cisco ASA 5580 Series Quick Start Guide 2-3 Check the Power LED on...
...powered on the front of the adaptive security appliance; The ASA 5510 and ASA 5520 chassis are identical, containing the same back panel features and indicators. Check the Status LED on . once it directly with an Ethernet cable, or connect the PC and the ASA to the console port and see ...obtain an IP address using DHCP. Chapter 2 Installing the ASA 5510, ASA 5520, or ASA 5540 Powering On the ASA Powering On the ASA Step 1 Step 2 Step 3 Step 4 Step 5 Attach the power cable to the appropriate ports. 78-19753-01 Cisco ASA 5580 Series Quick Start Guide 2-3 Check the Power LED on...
Quick Start Guide
Page 21
Verifying the Package Contents Verify the contents of the packing box to ensure that you have received all items necessary to install your ASA. 78-19753-01 Cisco ASA 5580 Series Quick Start Guide 4-1 4 C H A P T E R Installing the ASA 5580 Regulatory Compliance and Safety Information Read the safety warnings in the Regulatory Compliance and Safety Information for the Cisco ASA 5580 Adaptive Security Appliance and follow proper safety procedures when performing these steps.
Verifying the Package Contents Verify the contents of the packing box to ensure that you have received all items necessary to install your ASA. 78-19753-01 Cisco ASA 5580 Series Quick Start Guide 4-1 4 C H A P T E R Installing the ASA 5580 Regulatory Compliance and Safety Information Read the safety warnings in the Regulatory Compliance and Safety Information for the Cisco ASA 5580 Adaptive Security Appliance and follow proper safety procedures when performing these steps.
Quick Start Guide
Page 26
...• Have equal amounts of the traffic stays on the ASA 5580. See the Cisco ASA 5580 Adaptive Security Appliance Hardware Installation Guide for 10-Gigabit Ethernet adapters; What to Do Next Chapter 4 Installing the ASA 5580 • High Capacity (PCI Express x8 non-hot-plug... and 8 Each PCI bus connects to one of two I/O bridges: • I /O bridge 2: Slot 7 and slot 8 See the Cisco ASA 5580 Adaptive Security Appliance Hardware Installation Guide for more information about the network interfaces on slots 3 through 6 (achieving both I/O bridges. • Keep traffic flow within...
...• Have equal amounts of the traffic stays on the ASA 5580. See the Cisco ASA 5580 Adaptive Security Appliance Hardware Installation Guide for 10-Gigabit Ethernet adapters; What to Do Next Chapter 4 Installing the ASA 5580 • High Capacity (PCI Express x8 non-hot-plug... and 8 Each PCI bus connects to one of two I/O bridges: • I /O bridge 2: Slot 7 and slot 8 See the Cisco ASA 5580 Adaptive Security Appliance Hardware Installation Guide for more information about the network interfaces on slots 3 through 6 (achieving both I/O bridges. • Keep traffic flow within...
Quick Start Guide
Page 30
..., you want to use the CLI, connect your networks to act as shown in the following figure). See the Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide for more information. 300016 1 2 SFP1 SFP0 7 6 5 4 3 2 1 0 1 MGMT 0 0 1 USB PWR BOOT ALARM ACT VPN PS1 PS0 HDD1 HDD0 AUX CONSOLE RESET SFP1 SFP0 7 6 5 4 3 2 1 0 1 MGMT 0 0 1 USB PWR BOOT ALARM ACT...
..., you want to use the CLI, connect your networks to act as shown in the following figure). See the Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide for more information. 300016 1 2 SFP1 SFP0 7 6 5 4 3 2 1 0 1 MGMT 0 0 1 USB PWR BOOT ALARM ACT VPN PS1 PS0 HDD1 HDD0 AUX CONSOLE RESET SFP1 SFP0 7 6 5 4 3 2 1 0 1 MGMT 0 0 1 USB PWR BOOT ALARM ACT...
Getting Started Guide
Page 5
... User Visits a Web Server on the Internet 8-3 An Internet User Visits the DMZ Web Server 8-4 An Inside User Visits the DMZ Web Server 8-6 Configuring the Adaptive Security Appliance for a DMZ Deployment 8-8 Configuration Requirements 8-9 Information to Have Available 8-10 Enabling Inside Clients to Communicate with Devices on the Internet 8-10 Enabling Inside Clients to... Web Server to its Real Address on the Inside Interface 8-14 Configuring Static PAT for Public Access to the DMZ Web Server (Port Forwarding) 8-17 Cisco ASA 5500 Series Getting Started Guide v
... User Visits a Web Server on the Internet 8-3 An Internet User Visits the DMZ Web Server 8-4 An Inside User Visits the DMZ Web Server 8-6 Configuring the Adaptive Security Appliance for a DMZ Deployment 8-8 Configuration Requirements 8-9 Information to Have Available 8-10 Enabling Inside Clients to Communicate with Devices on the Internet 8-10 Enabling Inside Clients to... Web Server to its Real Address on the Inside Interface 8-14 Configuring Static PAT for Public Access to the DMZ Web Server (Port Forwarding) 8-17 Cisco ASA 5500 Series Getting Started Guide v
Getting Started Guide
Page 6
...: Configuring Connections for a Cisco AnyConnect VPN Client 10-1 About SSL VPN Client Connections 10-1 Obtaining the Cisco AnyConnect VPN Client Software 10-2 Example Topology Using AnyConnect SSL VPN Clients 10-3 Implementing the Cisco SSL VPN Scenario 10-3 Information to Have Available 10-4 Configuring the Adaptive Security Appliance for the Cisco AnyConnect VPN Client 10-5 Specifying the SSL VPN Interface 10-6 Specifying a User Authentication Method 10-7 Cisco ASA 5500 Series Getting...
...: Configuring Connections for a Cisco AnyConnect VPN Client 10-1 About SSL VPN Client Connections 10-1 Obtaining the Cisco AnyConnect VPN Client Software 10-2 Example Topology Using AnyConnect SSL VPN Clients 10-3 Implementing the Cisco SSL VPN Scenario 10-3 Information to Have Available 10-4 Configuring the Adaptive Security Appliance for the Cisco AnyConnect VPN Client 10-5 Specifying the SSL VPN Interface 10-6 Specifying a User Authentication Method 10-7 Cisco ASA 5500 Series Getting...
Getting Started Guide
Page 7
... Cisco AnyConnect VPN Client 10-9 Verifying the Remote-Access VPN Configuration 10-11 What to Do Next 10-12 Scenario: SSL VPN Clientless Connections 11-1 About Clientless SSL VPN 11-1 Security Considerations for Clientless SSL VPN Connections 11-2 Example Network with Browser-Based SSL VPN Access 11-3 Implementing the Clientless SSL VPN Scenario 11-4 Information to Have Available 11-5 Configuring the Adaptive Security Appliance for Browser-Based SSL VPN...
... Cisco AnyConnect VPN Client 10-9 Verifying the Remote-Access VPN Configuration 10-11 What to Do Next 10-12 Scenario: SSL VPN Clientless Connections 11-1 About Clientless SSL VPN 11-1 Security Considerations for Clientless SSL VPN Connections 11-2 Example Network with Browser-Based SSL VPN Access 11-3 Implementing the Clientless SSL VPN Scenario 11-4 Information to Have Available 11-5 Configuring the Adaptive Security Appliance for Browser-Based SSL VPN...
Getting Started Guide
Page 8
...the Other Side of the VPN Connection 12-12 What to Do Next 12-13 13 C H A P T E R Configuring the AIP SSM 13-1 Understanding the AIP SSM 13-2 How the AIP SSM Works with the Adaptive Security Appliance 13-2 Operating Modes 13-3...Adaptive Security Appliance with the CSC SSM 14-2 Scenario: Security Appliance with CSC SSM Deployed for Content Security 14-4 Configuration Requirements 14-5 Configuring the CSC SSM for Content Security 14-6 Obtain Software Activation Key from Cisco.com 14-6 Gather Information 14-7 Verify Time Settings 14-7 Run the CSC Setup Wizard 14-8 What to Do Next 14-17 Cisco ASA...
...the Other Side of the VPN Connection 12-12 What to Do Next 12-13 13 C H A P T E R Configuring the AIP SSM 13-1 Understanding the AIP SSM 13-2 How the AIP SSM Works with the Adaptive Security Appliance 13-2 Operating Modes 13-3...Adaptive Security Appliance with the CSC SSM 14-2 Scenario: Security Appliance with CSC SSM Deployed for Content Security 14-4 Configuration Requirements 14-5 Configuring the CSC SSM for Content Security 14-6 Obtain Software Activation Key from Cisco.com 14-6 Gather Information 14-7 Verify Time Settings 14-7 Run the CSC Setup Wizard 14-8 What to Do Next 14-17 Cisco ASA...
Getting Started Guide
Page 11
Install the chassis See ... Chapter 4, "Installing the ASA 5500, ASA 5510, ASA 5520, and ASA 5540" 78-19186-01 Cisco ASA 5500 Series Getting Started Guide 1-1 The adaptive security appliance implementations included in this document are required for your implementation of the Cisco ASA 5500 series adaptive security appliance. 1 C H A P T E R Before You Begin Use the following table to find the installation and configuration steps that are as...
Install the chassis See ... Chapter 4, "Installing the ASA 5500, ASA 5510, ASA 5520, and ASA 5540" 78-19186-01 Cisco ASA 5500 Series Getting Started Guide 1-1 The adaptive security appliance implementations included in this document are required for your implementation of the Cisco ASA 5500 series adaptive security appliance. 1 C H A P T E R Before You Begin Use the following table to find the installation and configuration steps that are as...
Getting Started Guide
Page 12
... Chapter 6, "Connecting Interface Cables on the ASA 5500, ASA 5510, ASA 5520, and ASA 5540 Platforms" Perform initial setup of the adaptive security Chapter 7, "Configuring the appliance Adaptive Security Appliance" Configure the adaptive security appliance for Chapter 8, "Scenario: DMZ your implementation Configuration" Chapter 9, "Scenario: IPsec Remote-Access VPN Configuration" Chapter 10, "Scenario: Configuring Connections for a Cisco AnyConnect VPN Client" Chapter 11, "Scenario: SSL VPN Clientless Connections" Chapter 12, "Scenario: Site...
... Chapter 6, "Connecting Interface Cables on the ASA 5500, ASA 5510, ASA 5520, and ASA 5540 Platforms" Perform initial setup of the adaptive security Chapter 7, "Configuring the appliance Adaptive Security Appliance" Configure the adaptive security appliance for Chapter 8, "Scenario: DMZ your implementation Configuration" Chapter 9, "Scenario: IPsec Remote-Access VPN Configuration" Chapter 10, "Scenario: Configuring Connections for a Cisco AnyConnect VPN Client" Chapter 11, "Scenario: SSL VPN Clientless Connections" Chapter 12, "Scenario: Site...
Getting Started Guide
Page 13
... 7, "Configuring the Adaptive Security Appliance" 78-19186-01 Cisco ASA 5500 Series Getting Started Guide 1-3 Chapter 4, "Installing the ASA 5500, ASA 5510, ASA 5520, and ASA 5540" Chapter 5, "Installing Optional SSMs" Chapter 6, "Connecting Interface Cables on the ASA 5500, ASA 5510, ASA 5520, and ASA 5540 Platforms" Perform initial setup the adaptive security appliance Chapter 7, "Configuring the Adaptive Security Appliance" Configure the adaptive security appliance for Chapter 9, "Scenario: IPsec AIP SSM Remote-Access VPN Configuration" Configure...
... 7, "Configuring the Adaptive Security Appliance" 78-19186-01 Cisco ASA 5500 Series Getting Started Guide 1-3 Chapter 4, "Installing the ASA 5500, ASA 5510, ASA 5520, and ASA 5540" Chapter 5, "Installing Optional SSMs" Chapter 6, "Connecting Interface Cables on the ASA 5500, ASA 5510, ASA 5520, and ASA 5540 Platforms" Perform initial setup the adaptive security appliance Chapter 7, "Configuring the Adaptive Security Appliance" Configure the adaptive security appliance for Chapter 9, "Scenario: IPsec AIP SSM Remote-Access VPN Configuration" Configure...
Getting Started Guide
Page 14
Chapter 4, "Installing the ASA 5500, ASA 5510, ASA 5520, and ASA 5540" Chapter 5, "Installing Optional SSMs" Chapter 6, "Connecting Interface Cables on the ASA 5500, ASA 5510, ASA 5520, and ASA 5540 Platforms" Chapter 7, "Configuring the Adaptive Security Appliance" Cisco ASA 5500 Series Getting Started Guide 1-4 78-19186-01 Install the chassis Install the 4GE SSM Connect interface cables Perform initial setup of the adaptive security appliance See ... ASA 5500 with...
Chapter 4, "Installing the ASA 5500, ASA 5510, ASA 5520, and ASA 5540" Chapter 5, "Installing Optional SSMs" Chapter 6, "Connecting Interface Cables on the ASA 5500, ASA 5510, ASA 5520, and ASA 5540 Platforms" Chapter 7, "Configuring the Adaptive Security Appliance" Cisco ASA 5500 Series Getting Started Guide 1-4 78-19186-01 Install the chassis Install the 4GE SSM Connect interface cables Perform initial setup of the adaptive security appliance See ... ASA 5500 with...
Getting Started Guide
Page 15
Chapter 3, "Installing the ASA 5550" Chapter 7, "Configuring the Adaptive Security Appliance" Cisco ASA 5500 Series Configuration Guide using the CLI Cisco ASA 5500 Series Command Reference Cisco ASA 5500 Series System Log Messages To Do This ... Install the chassis Install the fiber optic module, if any Connect interface cables Perform initial setup of the adaptive security appliance Refine configuration and configure optional and advanced...
Chapter 3, "Installing the ASA 5550" Chapter 7, "Configuring the Adaptive Security Appliance" Cisco ASA 5500 Series Configuration Guide using the CLI Cisco ASA 5500 Series Command Reference Cisco ASA 5500 Series System Log Messages To Do This ... Install the chassis Install the fiber optic module, if any Connect interface cables Perform initial setup of the adaptive security appliance Refine configuration and configure optional and advanced...
Getting Started Guide
Page 17
... connectivity: • Slot 0 (corresponding to Bus 0) has four embedded copper Gigabit Ethernet ports • Slot 1 (corresponding to the guidelines described in this chapter. The Cisco ASA 5550 adaptive security appliance is designed to deliver maximum throughput when configured according to Bus 1) has four embedded copper Gigabit Ethernet ports and four embedded SFPs that support fiber...
... connectivity: • Slot 0 (corresponding to Bus 0) has four embedded copper Gigabit Ethernet ports • Slot 1 (corresponding to the guidelines described in this chapter. The Cisco ASA 5550 adaptive security appliance is designed to deliver maximum throughput when configured according to Bus 1) has four embedded copper Gigabit Ethernet ports and four embedded SFPs that support fiber...
Getting Started Guide
Page 18
... SFP modules, see the "Installing SFP Modules" section on the Cisco ASA 5550. Balancing Traffic to Maximize Throughput Chapter 2 Maximizing Throughput on the ASA 5550 Note To establish fiber connectivity on the adaptive security appliance, you must order and install SFP modules for each fiber port ...copper ports. Figure 2-1 Embedded Ports on the ASA 5550 Slot 1 Slot 0 CONSOLE AUX MGMT USB2 USB1 PWR STATUS 153217 LNK 3 2 1 0 SPD Ethernet Fiber FLASH LINK SPD LINK SPD LINK SPD LINK SPD 3 2 1 0 POWER STATUS ACTIVE VPN FLASH Ethernet Note Although Slot 1 has four copper...
... SFP modules, see the "Installing SFP Modules" section on the Cisco ASA 5550. Balancing Traffic to Maximize Throughput Chapter 2 Maximizing Throughput on the ASA 5550 Note To establish fiber connectivity on the adaptive security appliance, you must order and install SFP modules for each fiber port ...copper ports. Figure 2-1 Embedded Ports on the ASA 5550 Slot 1 Slot 0 CONSOLE AUX MGMT USB2 USB1 PWR STATUS 153217 LNK 3 2 1 0 SPD Ethernet Fiber FLASH LINK SPD LINK SPD LINK SPD LINK SPD 3 2 1 0 POWER STATUS ACTIVE VPN FLASH Ethernet Note Although Slot 1 has four copper...
Getting Started Guide
Page 19
... in the device, enabling the adaptive security appliance to Fiber) Slot 1 Maximum throughput Slot 0 CONSOLE AUX MGMT USB2 USB1 LNK 3 2 1 0 SPD PWR STATUS Incoming and outgoing traffic FLASH LINK SPD LINK SPD LINK SPD LINK SPD 3 2 1 0 POWER STATUS ACTIVE VPN FLASH Incoming and outgoing traffic 153305 78-19186-01 Cisco ASA 5500 Series Getting Started Guide...
... in the device, enabling the adaptive security appliance to Fiber) Slot 1 Maximum throughput Slot 0 CONSOLE AUX MGMT USB2 USB1 LNK 3 2 1 0 SPD PWR STATUS Incoming and outgoing traffic FLASH LINK SPD LINK SPD LINK SPD LINK SPD 3 2 1 0 POWER STATUS ACTIVE VPN FLASH Incoming and outgoing traffic 153305 78-19186-01 Cisco ASA 5500 Series Getting Started Guide...
