Hardware Installation Guide
Page 2
... ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED "AS IS" WITH ALL FAULTS. Cisco and the Cisco logo are designed to radio communications. If the interference stops, it may radiate radio-frequency energy. and other company. (1110R) Cisco ASA 5500 Series Hardware Installation Guide ©2009 Cisco Systems, Inc. To view a list of California. All rights reserved...
... ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED "AS IS" WITH ALL FAULTS. Cisco and the Cisco logo are designed to radio communications. If the interference stops, it may radiate radio-frequency energy. and other company. (1110R) Cisco ASA 5500 Series Hardware Installation Guide ©2009 Cisco Systems, Inc. To view a list of California. All rights reserved...
Hardware Installation Guide
Page 3
... 2-1 Safety Recommendations 2-2 Maintaining Safety with Electricity 2-2 Preventing Electrostatic Discharge Damage 2-3 General Site Requirements 2-4 Site Environment 2-4 Preventive Site Configuration 2-4 Power Supply Considerations 2-4 Configuring Equipment Racks 2-6 Installing the Adaptive Security Appliance 3-1 Installing the Adaptive Security Appliance 3-1 Rack-Mounting the Chassis 3-2 Setting the Chassis on a Desktop 3-3 Connecting the Interface Cables 3-4 Maintenance and Upgrade Procedures 4-1 Removing and Replacing the Chassis Cover 4-1 Cisco ASA 5500 Series Hardware Installation Guide 1
... 2-1 Safety Recommendations 2-2 Maintaining Safety with Electricity 2-2 Preventing Electrostatic Discharge Damage 2-3 General Site Requirements 2-4 Site Environment 2-4 Preventive Site Configuration 2-4 Power Supply Considerations 2-4 Configuring Equipment Racks 2-6 Installing the Adaptive Security Appliance 3-1 Installing the Adaptive Security Appliance 3-1 Rack-Mounting the Chassis 3-2 Setting the Chassis on a Desktop 3-3 Connecting the Interface Cables 3-4 Maintenance and Upgrade Procedures 4-1 Removing and Replacing the Chassis Cover 4-1 Cisco ASA 5500 Series Hardware Installation Guide 1
Hardware Installation Guide
Page 5
... Series Adaptive Security Appliances. Audience This guide is for network administrators who perform any of the following tasks: • Managing network security • Installing and configuring firewalls • Managing default and static routes, and TCP and UDP services Document Organization This guide includes the following chapters and appendices: • Chapter 1, "Overview" describes the product and the memory requirements. • Chapter 2, "Preparing for Installation," describes the steps to all models unless specifically...
... Series Adaptive Security Appliances. Audience This guide is for network administrators who perform any of the following tasks: • Managing network security • Installing and configuring firewalls • Managing default and static routes, and TCP and UDP services Document Organization This guide includes the following chapters and appendices: • Chapter 1, "Overview" describes the product and the memory requirements. • Chapter 2, "Preparing for Installation," describes the steps to all models unless specifically...
Hardware Installation Guide
Page 6
... Start > Settings > Control Panel. About This Guide • Chapter 3, "Installing the Adaptive Security Appliance,"describes how to install the chassis on the wall or rack and how to connect the interface cables on the adaptive security appliance. • Chapter 4, "Maintenance and Upgrade Procedures," describes how to material not covered in the manual. Graphical user interface examples uses these conventions: • Examples depict screen displays and the command line in italic screen font. Document Conventions Command descriptions use these...
... Start > Settings > Control Panel. About This Guide • Chapter 3, "Installing the Adaptive Security Appliance,"describes how to install the chassis on the wall or rack and how to connect the interface cables on the adaptive security appliance. • Chapter 4, "Maintenance and Upgrade Procedures," describes how to material not covered in the manual. Graphical user interface examples uses these conventions: • Examples depict screen displays and the command line in italic screen font. Document Conventions Command descriptions use these...
Hardware Installation Guide
Page 9
... 128 Multiple Power Cord Warning This unit has more than 120 VAC, 15A U.S. (240 VAC, 10A international) is designed to the ON position. Statement 13 78-17989-01 Cisco ASA 5500 Series Hardware Installation Guide 7 Ensure that the unit is plugged into. Install only in accordance with Local and National Electrical Codes Warning Warning Installation of the circuit breaker to work...
... 128 Multiple Power Cord Warning This unit has more than 120 VAC, 15A U.S. (240 VAC, 10A international) is designed to the ON position. Statement 13 78-17989-01 Cisco ASA 5500 Series Hardware Installation Guide 7 Ensure that the unit is plugged into. Install only in accordance with Local and National Electrical Codes Warning Warning Installation of the circuit breaker to work...
Hardware Installation Guide
Page 10
... and set content to be grounded. Cisco currently supports RSS Version 2.0. and they prevent exposure to hazardous voltages and currents inside the chassis; Statement 142 Where to Find Safety and Warning Information For safety and warning information, see the monthly What's New in Cisco Product Documentation, which also lists all cards, faceplates, front covers, and rear covers are a free service. This document...
... and set content to be grounded. Cisco currently supports RSS Version 2.0. and they prevent exposure to hazardous voltages and currents inside the chassis; Statement 142 Where to Find Safety and Warning Information For safety and warning information, see the monthly What's New in Cisco Product Documentation, which also lists all cards, faceplates, front covers, and rear covers are a free service. This document...
Hardware Installation Guide
Page 12
... LEDs and Ports (AC Power Supply Model Shown) 1 2 3 45 CONSOLE AUX MGMT USB2 USB1 119572 FLASH LINK SPD LINK SPD LINK SPD LINK SPD 3 2 1 0 POWER STATUS ACTIVE VPN FLASH 6 7 8 10 12 13 14 9 11 1 Management port1 6 2 External CompactFlash slot 7 3 Serial Console port 8 USB 2.0 interfaces2 Network interfaces3 Power indicator LED 11 VPN LED 12 Flash LED 13 AUX port4 4 Power switch 9 Status indicator LED 14 Power connector 5 Power indicator LED 10 Active LED 1. Figure 1-1 Front Panel LEDs POWER STATUS ACTIVE VPN FLASH CISCO ASA 5540 SERIES Adaptive Security...
... LEDs and Ports (AC Power Supply Model Shown) 1 2 3 45 CONSOLE AUX MGMT USB2 USB1 119572 FLASH LINK SPD LINK SPD LINK SPD LINK SPD 3 2 1 0 POWER STATUS ACTIVE VPN FLASH 6 7 8 10 12 13 14 9 11 1 Management port1 6 2 External CompactFlash slot 7 3 Serial Console port 8 USB 2.0 interfaces2 Network interfaces3 Power indicator LED 11 VPN LED 12 Flash LED 13 AUX port4 4 Power switch 9 Status indicator LED 14 Power connector 5 Power indicator LED 10 Active LED 1. Figure 1-1 Front Panel LEDs POWER STATUS ACTIVE VPN FLASH CISCO ASA 5540 SERIES Adaptive Security...
Hardware Installation Guide
Page 13
... 1/1, GigabitEthernet 1/2, and GigabitEthernet 1/3 2. For more information about the Management port, see themanagement only command in the Cisco Security Appliance Command Reference. OL-10089-01 Cisco ASA 5500 Series Hardware Installation Guide 1-3 Table 1-1 4GE SSM LEDs for the Cisco ASA 5550 LED 2, 7 LINK Color State Green Solid Flashing Description There is a Fast Ethernet interface designed for management traffic only. 4. Not supported at Cisco. SFP ports, from right to left, GigabitEthernet 1/0, GigabitEthernet 1/1, GigabitEthernet 1/2, and GigabitEthernet...
... 1/1, GigabitEthernet 1/2, and GigabitEthernet 1/3 2. For more information about the Management port, see themanagement only command in the Cisco Security Appliance Command Reference. OL-10089-01 Cisco ASA 5500 Series Hardware Installation Guide 1-3 Table 1-1 4GE SSM LEDs for the Cisco ASA 5550 LED 2, 7 LINK Color State Green Solid Flashing Description There is a Fast Ethernet interface designed for management traffic only. 4. Not supported at Cisco. SFP ports, from right to left, GigabitEthernet 1/0, GigabitEthernet 1/1, GigabitEthernet 1/2, and GigabitEthernet...
Hardware Installation Guide
Page 15
... memory requirements for the adaptive security appliance for each model. For more information, see the Cisco Security Appliance Command Line Configuration Guide. If it does not, configuration synchronization from the unit with the smaller Flash memory has enough space to accommodate the software image files and the configuration files. Chapter 1 Overview Memory Requirements Memory Requirements Table 1-3 lists the CPU and the memory specifications for software Version 8.3 or later, go to...
... memory requirements for the adaptive security appliance for each model. For more information, see the Cisco Security Appliance Command Line Configuration Guide. If it does not, configuration synchronization from the unit with the smaller Flash memory has enough space to accommodate the software image files and the configuration files. Chapter 1 Overview Memory Requirements Memory Requirements Table 1-3 lists the CPU and the memory specifications for software Version 8.3 or later, go to...
Hardware Installation Guide
Page 17
... three separate devices, each with deeper web inspection and flow-specific analysis, improved secure connectivity via end-point security posture validation, and voice and video over VPN support. Previously, these functions were available in this guide, references to "Cisco ASA 5500 series Adaptive Security Appliance" and "adaptive security appliance" apply to all models unless specifically noted otherwise. ASDM is a browser-based, Java applet used to follow before installing new hardware or performing hardware upgrades, and...
... three separate devices, each with deeper web inspection and flow-specific analysis, improved secure connectivity via end-point security posture validation, and voice and video over VPN support. Previously, these functions were available in this guide, references to "Cisco ASA 5500 series Adaptive Security Appliance" and "adaptive security appliance" apply to all models unless specifically noted otherwise. ASDM is a browser-based, Java applet used to follow before installing new hardware or performing hardware upgrades, and...
Hardware Installation Guide
Page 18
...; Cisco ASA 5500 Series Hardware Installation Guide 2-2 78-17989-01 Unpack the chassis. disconnect the power at all times. Safety Recommendations Chapter 2 Preparing for Installation Step 2 Step 3 Step 4 Read the release notes for desktop mounting). Safety Recommendations Use the following guidelines and the information in the following items: documentation, a product CD, a power cord (AC models only), two RJ-45 Ethernet cables, one person to turn off switch for...
...; Cisco ASA 5500 Series Hardware Installation Guide 2-2 78-17989-01 Unpack the chassis. disconnect the power at all times. Safety Recommendations Chapter 2 Preparing for Installation Step 2 Step 3 Step 4 Read the release notes for desktop mounting). Safety Recommendations Use the following guidelines and the information in the following items: documentation, a product CD, a power cord (AC models only), two RJ-45 Ethernet cables, one person to turn off switch for...
Hardware Installation Guide
Page 19
... in your work area, such as moist floors, ungrounded power extension cables, frayed power cords, and missing safety grounds. • If an electrical accident occurs, proceed as listed in the Regulatory Compliance and Safety Information for the Cisco ASA 5500 Series document. • The adaptive security appliance models equipped with AC-input power supplies are shipped with a 3-wire electrical cord with a grounding-type plug...
... in your work area, such as moist floors, ungrounded power extension cables, frayed power cords, and missing safety grounds. • If an electrical accident occurs, proceed as listed in the Regulatory Compliance and Safety Information for the Cisco ASA 5500 Series document. • The adaptive security appliance models equipped with AC-input power supplies are shipped with a 3-wire electrical cord with a grounding-type plug...
Hardware Installation Guide
Page 29
... match the default baud rate (9600 baud) of the Console port of the Ethernet cable to the management port on your computer or network device. Connect the cables to RJ-45 Ethernet cable Cisco ASA 5500 Series Hardware Installation Guide 3-5 The Management0/0 port is a Fast Ethernet interface with a dedicated port used only for internal use at Cisco. You can configure any interface to run the adaptive security appliance CLI. For more information about this port to be a management-only interface using the management-only command. Connect the other...
... match the default baud rate (9600 baud) of the Console port of the Ethernet cable to the management port on your computer or network device. Connect the cables to RJ-45 Ethernet cable Cisco ASA 5500 Series Hardware Installation Guide 3-5 The Management0/0 port is a Fast Ethernet interface with a dedicated port used only for internal use at Cisco. You can configure any interface to run the adaptive security appliance CLI. For more information about this port to be a management-only interface using the management-only command. Connect the other...
Hardware Installation Guide
Page 31
... Series Hardware Installation Guide 3-7 For a complete description of the 4GE SSM. - Figure 3-7 Connecting to the Ethernet port of the command syntax, see the Cisco ASA 5500 Series Command Reference. • SFP modules - The click indicates that the SFP module is necessary only if you have installed the 4GE SSM on the adaptive security appliance. Remove the optical port plugs from the installed SFP as shown in interface configuration mode to set the media type to your network device, such as a router, switch...
... Series Hardware Installation Guide 3-7 For a complete description of the 4GE SSM. - Figure 3-7 Connecting to the Ethernet port of the command syntax, see the Cisco ASA 5500 Series Command Reference. • SFP modules - The click indicates that the SFP module is necessary only if you have installed the 4GE SSM on the adaptive security appliance. Remove the optical port plugs from the installed SFP as shown in interface configuration mode to set the media type to your network device, such as a router, switch...
Hardware Installation Guide
Page 37
... 4-4. Figure 4-3 Replacing the Chassis Cover 119637 POWER STATUSACTIVE VPN FLASH CISCO ASA 5540 SERIES Adaptive Security Appliance Step 4 Fasten the top panel with the chassis bottom. Wear an ESD-preventive wrist strap, ensuring that the chassis is available, ground yourself by touching the metal part of the chassis. 78-17989-01 Cisco ASA 5500 Series Hardware Installation Guide 4-3 Figure 4-4 Replacing the Screws 119635 POWER STATUSACTIVE VPN FLASH Step 5 Reinstall the chassis on a rack. Connect the grounding...
... 4-4. Figure 4-3 Replacing the Chassis Cover 119637 POWER STATUSACTIVE VPN FLASH CISCO ASA 5540 SERIES Adaptive Security Appliance Step 4 Fasten the top panel with the chassis bottom. Wear an ESD-preventive wrist strap, ensuring that the chassis is available, ground yourself by touching the metal part of the chassis. 78-17989-01 Cisco ASA 5500 Series Hardware Installation Guide 4-3 Figure 4-4 Replacing the Screws 119635 POWER STATUSACTIVE VPN FLASH Step 5 Reinstall the chassis on a rack. Connect the grounding...
Hardware Installation Guide
Page 38
... "Working in the "Installing and Replacing the Intelligent SSM" section on page 4-20 for more information. Replace the chassis cover as described in an ESD-controlled environment. Cisco ASA 5500 Series Hardware Installation Guide 4-4 78-17989-01 See the "Installing and Replacing the Intelligent SSM" section on page 4-20. Place the used battery aside. Replace the battery with a compactible Lithium CR-2032 battery (which is rack-mounted. Remove...
... "Working in the "Installing and Replacing the Intelligent SSM" section on page 4-20 for more information. Replace the chassis cover as described in an ESD-controlled environment. Cisco ASA 5500 Series Hardware Installation Guide 4-4 78-17989-01 See the "Installing and Replacing the Intelligent SSM" section on page 4-20. Place the used battery aside. Replace the battery with a compactible Lithium CR-2032 battery (which is rack-mounted. Remove...
Hardware Installation Guide
Page 49
... USB2 USB1 119642 LINK 3 SPD LINK 2 SPD LINK 1 SPD LINK 0 SPD FLASH POWER STATUS ACTIVE VPN FLASH Step 4 Insert the 4GE SSM through the slot opening as shown in Figure 4-19. The system booted correctly. Chapter 4 Maintenance and Upgrade Procedures Installing and Replacing the 4GE SSM Table 4-1 4GE SSM LEDs LED 2, 7 LINK 3, 8 SPEED 4 POWER 5 STATUS Color State Green Solid Flashing Off 10 MB Green 100 MB Amber 1000 MB (GigE) Green On Green Flashing Green Solid Amber Solid Description There...
... USB2 USB1 119642 LINK 3 SPD LINK 2 SPD LINK 1 SPD LINK 0 SPD FLASH POWER STATUS ACTIVE VPN FLASH Step 4 Insert the 4GE SSM through the slot opening as shown in Figure 4-19. The system booted correctly. Chapter 4 Maintenance and Upgrade Procedures Installing and Replacing the 4GE SSM Table 4-1 4GE SSM LEDs LED 2, 7 LINK 3, 8 SPEED 4 POWER 5 STATUS Color State Green Solid Flashing Off 10 MB Green 100 MB Amber 1000 MB (GigE) Green On Green Flashing Green Solid Amber Solid Description There...
Hardware Installation Guide
Page 50
... of the chassis. Locate the grounding strap from the accessory kit and fasten it contacts your network devices. Remove the 4GE SSM. Replace the existing card by the adaptive security appliance. 4-16 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01 Installing and Removing the SFP Modules The SFP is installed properly the STATUS LED flashes during boot up and is solid when operational. Connect the RJ-45 cable to your network devices. Table 4-2 lists the SFP modules that are supported: •...
... of the chassis. Locate the grounding strap from the accessory kit and fasten it contacts your network devices. Remove the 4GE SSM. Replace the existing card by the adaptive security appliance. 4-16 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01 Installing and Removing the SFP Modules The SFP is installed properly the STATUS LED flashes during boot up and is solid when operational. Connect the RJ-45 cable to your network devices. Table 4-2 lists the SFP modules that are supported: •...
Hardware Installation Guide
Page 56
... 3 Enter the hw-mod mod 1 shut command in Figure 4-24. Locate the grounding strap from the Slot Cover MGMT USB2 USB1 LINK 3 SPD LINK 2 SPD LINK 1 SPD LINK 0 SPD FLASH POWER STATUS ACTIVE VPN FLASH 119642 4-22 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01 Verify that the module is booting. Installing and Replacing the Intelligent SSM Chapter 4 Maintenance and Upgrade Procedures Table 4-6 describes the AIP/CSC SSM 10...
... 3 Enter the hw-mod mod 1 shut command in Figure 4-24. Locate the grounding strap from the Slot Cover MGMT USB2 USB1 LINK 3 SPD LINK 2 SPD LINK 1 SPD LINK 0 SPD FLASH POWER STATUS ACTIVE VPN FLASH 119642 4-22 Cisco ASA 5500 Series Hardware Installation Guide 78-17989-01 Verify that the module is booting. Installing and Replacing the Intelligent SSM Chapter 4 Maintenance and Upgrade Procedures Table 4-6 describes the AIP/CSC SSM 10...
Hardware Installation Guide
Page 69
... adaptive security appliance. Table 1-5 SFP Port Cabling Specifications Cisco Product Number GLC-SX-MM= Wavelength (nanometer) 850 Core Size (micron) 62.5 50.0 Baud Rate 1.0625 1.0625 Cable Distance 300 m 500 m GLC-LH-SM= 1300 9.0 1.0625 10 km 78-17989-01 Cisco ASA 5500 Series Hardware Installation Guide 1-5 Appendix 1 Cable Pinouts SFP Fiber Ports SFP Fiber Ports Table 1-4 lists the types of SFP Modules and Connectors Port Compliance Gigabit Ethernet 1000BASE-SX 1000BASE-LX Connector SW LW Fiber Type MMF SMF Table 1-5 lists the SFP port cabling specifications for the SFP...
... adaptive security appliance. Table 1-5 SFP Port Cabling Specifications Cisco Product Number GLC-SX-MM= Wavelength (nanometer) 850 Core Size (micron) 62.5 50.0 Baud Rate 1.0625 1.0625 Cable Distance 300 m 500 m GLC-LH-SM= 1300 9.0 1.0625 10 km 78-17989-01 Cisco ASA 5500 Series Hardware Installation Guide 1-5 Appendix 1 Cable Pinouts SFP Fiber Ports SFP Fiber Ports Table 1-4 lists the types of SFP Modules and Connectors Port Compliance Gigabit Ethernet 1000BASE-SX 1000BASE-LX Connector SW LW Fiber Type MMF SMF Table 1-5 lists the SFP port cabling specifications for the SFP...