Cisco ASA 5506-X Manuel

Cisco ASA 5506-X Hardware Installation Guide

First Published: 0,

Last Modified: 0,

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Text Part Number: Online Only

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://

www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership

relationship between Cisco and any other company. (1110R)

CONTENTS

CHAPTER 1

About the ASA 5506-X 1

Package Contents 2

Front Panel 2

Rear Panel 2

Status Lights 4

Network Ports 5

Console Ports 5

Internal and External Flash Storage 6

Solid State Drive 7

Power Supply 7

Hardware Specifications 7

CHAPTER 2

Prepare for Installation 9

Installation Warnings 9

Position the ASA 10

Safety Recommendations 11

Maintain Safety with Electricity 11

Prevent Electrostatic Discharge Damage 12

Site Environment 12

Site Considerations 12

Power Supply Considerations 13

Equipment Rack Configuration 13

CHAPTER 3

Mount and Connect the ASA 15

Mount the ASA 15

Desktop Mount the ASA 15

Wall Mount the ASA 15

Rack Mount the ASA 17

Cisco ASA 5506-X Hardware Installation Guide

Online Only iii

Connect Cables, Turn on Power, and Verify Connectivity 18

Connect to a Console Terminal or PC 19

Connect to the Console Port with Microsoft Windows 19

Connect to the Console Port with Mac OS X 21

Connect to the Console Port with Linux 21

Cisco ASA 5506-X Hardware Installation Guide

iv Online Only

Contents

CHAPTER 1

About the ASA 5506-X

The Cisco ASA 5506-X adaptive security appliance is part of the ASA 5500-X of next-generation mid-range

ASAs and is built on the same security platform as the rest of the ASA family.

This next-generation ASA delivers unprecedented levels of defense against threats to the network with deeper

web inspection and flow-specific analysis, improved secure connectivity via end-point security posture

validation, and voice and video over VPN support. It also provides enhanced support for intelligent information

networks through improved network integration, resiliency, and scalability.

This ASA is a smaller form-factor chassis, intended primarily for desktop or wall-mounting, although one

or two can be mounted in a single rack shelf. The ASA has a standard 1 RU chassis. See http://www.cisco.com/

c/en/us/products/security/asa-5500-series-next-generation-firewalls/index.html to compare the performance

metrics and capabilities of the 5500-X ASAs.

Before beginning any of the procedures described in this book, be sure to read the Regulatory Compliance

and Safety Information for the Cisco ASA 5506-X appliances (found at http://www.cisco.com/go/

asa5506x-compliance) and follow proper safety procedures.

Note

•Package Contents, page 2

•Front Panel, page 2

•Rear Panel, page 2

•Status Lights, page 4

•Network Ports, page 5

•Console Ports, page 5

•Internal and External Flash Storage, page 6

•Solid State Drive, page 7

•Power Supply, page 7

•Hardware Specifications, page 7

Cisco ASA 5506-X Hardware Installation Guide

Online Only 1

Package Contents

This section lists the package contents for the ASA. Note that the contents are subject to change and your

exact contents might contain additional or fewer items.

Blue Console Cable PC Terminal Adapter2Chassis1

Brick power supply4Power cord3

Front Panel

The following figure shows the front panel. Note that there are no connectors or LEDs on the front panel.

Rear Panel

The following figure shows the rear panel.

Cisco ASA 5506-X Hardware Installation Guide

2Online Only

About the ASA 5506-X

Package Contents

DescriptionLED

The locations and meanings of the status LEDs are described in Status Lights,

on page 4.

Status LEDs1

The chassis power-supply socket. See Power Supply, on page 7 for more

information about the chassis power supply. (The ASA is powered on when

you plug in the DC power supply.)

Power cord socket2

Eight Gigabit Ethernet RJ-45 (8P8C) network I/O interfaces. The ports are

numbered (from left to right) 1, 2, 3, 4, 5, 6, 7, 8. Each port includes a pair of

LEDs, one each for connection status and link status. The ports are named and

numbered Gigabit Ethernet 1/1 through Gigabit Ethernet 1/8. See Network

Ports, on page 5 for additional information.

Network data ports3

A Gigabit Ethernet interface restricted to network management access only.

Connect with an RJ-45 cable.

Management port4

Two serial ports, a mini USB Type B, and a standard RJ-45 (8P8C), are provided

for management access via an external system. See Console Ports, on page

5for additional information.

Console ports5

A standard USB Type A port is provided that allows the attachment of an

external device, such as mass storage. See Internal and External Flash Storage,

on page 6 for additional information.

USB port6

A small recessed button that if pressed for longer than three seconds resets the

ASA to its default “as-shipped”state following the next reboot. Configuration

variables are reset to factory default. However, the flash is not erased and no

files are removed.

You can use the service sw-reset-button to disable the reset button.

The default is enabled.

Note

Reset button7

The slot accepts a standard Kensington T-bar locking mechanism for securing

the ASA.

Lock slot8

Cisco ASA 5506-X Hardware Installation Guide

Online Only 3

About the ASA 5506-X

Rear Panel

Status Lights

Facing the rear of the chassis, the status lights are located on the top left edge (facing the front of the chassis,

they are in the back right corner of the top). The network port lights are at the top sides of each network port.

The following figure shows the lights on the top left edge.

DescriptionLED

Power supply status:

•Unlit –Power supply off.

•Solid green –Power supply on.

See Power Supply, on page 7 for additional power information specific to

your specific ASA.

Power1

System operating status:

•Green –Normal system function.

•Amber –Critical alarm indicating one or more of the following:

•Major failure of a hardware or software component.

•Over-temperature condition.

•Power voltage outside the tolerance range.

Status2

Cisco ASA 5506-X Hardware Installation Guide

4Online Only

About the ASA 5506-X

Status Lights

DescriptionLED

Status of the failover pair:

•Solid green –Failover pair operating normally. The LED is green always

unless the ASA in an HA pair.

•Amber –When the ASA is in an HA pair, the LED is amber for the

Standby unit.

•Unlit –Failover is not operational.

Active3

Not in use on the ASA 5506-X.Wireless3

On the rear panel, a pair of LEDs (Link status and connection Status) for each

of the eight Gigabit Ethernet network ports, and the Gigabit Ethernet

Management port.

Link status (L):

•Unlit –No link, or port is not in use.

•Solid green –Link established.

•Flashing green –Link activity.

Connection-speed status (S):

•One blink every three seconds –10 Mbps.

•Two rapid blinks –100 Mbps.

•Three rapid blinks –1000 Mbps.

Network port status4

Network Ports

There are eight 10/100/1000 baseT Ethernet network ports on the ASA 5506-X. Each RJ-45 (8P8C) copper

port supports auto MDI/X as well as auto-negotiation for interface speed, duplex, and other negotiated

parameters, and are MDI/MDIX compliant.

Looking at the rear of the ASA, where the ports are located, port 1 is on the left, and port 8 is on the right,

next to the console and management ports. Each port is accompanied by a pair of LEDs, one each for link

status (L) and connection status (S). The ports are named and numbered Gigabit Ethernet 1/1 through Gigabit

Ethernet 1/8.

Console Ports

The ASA has two external console ports, a standard RJ-45 port and a Mini USB Type B serial port. Only one

console port can be active at a time. When a cable is plugged into the USB console port, the RJ-45 port

becomes inactive. Conversely, when the USB cable is removed from the USB port, the RJ-45 port becomes

active. The console ports do not have any hardware flow control. You can use the command-line interface

Cisco ASA 5506-X Hardware Installation Guide

Online Only 5

About the ASA 5506-X

Network Ports

(CLI) to configure your ASA through either serial console port by using a terminal server or a terminal

emulation program on a computer.

See Connect to a Console Terminal or PC, on page 19 for the procedure to install a console terminal.

RJ-45 Port

The RJ-45 (8P8C) port supports RS-232 signaling to an internal UART controller. The RJ-45 console

port does not support a remote dial-in modem. You can use a standard management cable (Cisco part

number 72-3383-01) to convert the RJ45-to-DB9 connection if necessary.

Mini USB Type B Port

The Mini USB Type B port lets you connect to a USB port on an external computer. For Linux and

Macintosh systems, no special driver is required. For Windows systems, you must download and install

a USB driver (available on software.cisco.com). You can plug and unplug the USB cable from the

console port without affecting Windows HyperTerminal operations. We recommend shielded USB

cables with properly terminated shields. Baud rates for the USB console port are 1200, 2400, 4800,

9600, 19200, 38400, 57600, and 115200 bps.

For Windows operating systems, you must install a Cisco Windows USB Console Driver on any PC

connected to the console port before using the USB console port. See Connect to the Console Port with

Microsoft Windows, on page 19 for information on installing the driver.

Note

Internal and External Flash Storage

The ASA contains one internal USB flash drive, and a standard USB Type A port that you can use to attach

an external device. The USB port can provide output power of 5 volts, up to a maximum of 500 mA (5 USB

power units).

Internal USB Device

An embedded eUSB device is used as the internal flash; it is identified as disk0.

External USB Drive (Optional)

You can use the external Type A USB port to attach a data-storage device. The external USB drive

identifier is disk1. When the ASA is powered on, a connected USB drive is mounted as disk1 and is

available for you to use. Additionally, the file-system commands that are available to disk0 are also

available to disk1, including copy,format,delete,mkdir,pwd,cd, and so on.

If you insert a USB drive with more than one partition, only the first partition is mounted.

FAT-32 File System

The ASA only supports FAT-32-formatted file systems for the internal eUSB and external USB drives.

If you insert an external USB drive that is not in FAT-32 format, the system mounting process fails,

and you receive an error message. You can enter the command format disk1: to format the partition

to FAT-32 and mount the partition to disk1 again; however, data might be lost.

Cisco ASA 5506-X Hardware Installation Guide

6Online Only

About the ASA 5506-X

Internal and External Flash Storage

Autres manuels pour ASA 5506-X

Table des matières

Autres manuels Cisco Matériel réseau

Cisco

Cisco Mc3810 - 16MB Flash Memory Guide rapide

Cisco

Cisco Catalyst 2960-XR Manuel utilisateur

Cisco

Cisco CTE 1400 Series Manuel utilisateur

Cisco

Cisco Gigabit Switch Router Cisco 12012 Manuel utilisateur

Cisco

Cisco Physical Access 1125 Appliance Manuel utilisateur

Cisco

Cisco Meraki Catalyst 9300/X/L-M Series Manuel utilisateur

Cisco

Cisco MDS 9500 Series Manuel

Cisco

Cisco GS7000 Mode d'emploi

Cisco

Cisco Nexus 93600CD-GX Manuel

Cisco

Cisco Firepower 1010 Series Manuel

Cisco

Cisco 7606 Manuel utilisateur

Cisco

Cisco Aironet 1000 Series Manuel

Cisco

Cisco MGX 8260 Guide de démarrage rapide

Cisco

Cisco DOC 785983 Manuel utilisateur

Cisco

Cisco 6500 - Catalyst Series 10 Gigabit EN Interface Module... Manuel utilisateur

Cisco

Cisco Firepower 4100 Series Manuel utilisateur

Cisco

Cisco MERAKI CW9166D1 Manuel utilisateur

Cisco

Cisco NCS 1004 Manuel utilisateur

Cisco

Cisco 2600 Series Document technique

Cisco

Cisco ONS 15200 Series Manuel utilisateur

Cisco

Cisco 3600 Series Instructions d'utilisation et de sécurité

Cisco

Cisco MERAKI MX75 Manuel utilisateur

Cisco

Cisco Firepower 9300 Guide de maintenance et de service

Cisco

Cisco LightStream 1010 Manuel

Manuels Matériel réseau populaires d'autres marques

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manuel utilisateur

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manuel utilisateur

Yudor

Yudor YDS-16 Manuel utilisateur

D-Link

D-Link ShareCenter DNS-320L Manuel utilisateur

Samsung

Samsung ES1642dc Instructions d'utilisation

Honeywell Home

Honeywell Home LTEM-PV Instructions de montage

evertz

evertz 7700 Series Manuel utilisateur

D-Link

D-Link ShareCenter DNS-343 Manuel utilisateur

Asante

Asante AsanteBridge 1012 Manuel utilisateur

FireBrick

FireBrick FB2700 Manuel utilisateur

Audiovox Electronics

Audiovox Electronics ARWH2T Manuel utilisateur

ADC

ADC DSX-1 Manuel

NetComm

NetComm NF2 Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 5620 Manuel utilisateur

Dell EMC

Dell EMC XC6420 Series Manuel utilisateur

Lanner

Lanner NCA-1020A Manuel utilisateur

Allied Telesis

Allied Telesis AT-TN121-A Manuel utilisateur

Arista

Arista CCA-ETM-Q12 Manuel utilisateur