Cisco ASA 5508-X Manuel

Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide

First Published: 2015-04-07

Last Modified: 2017-06-16

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Text Part Number: Online Only

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://

www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership

relationship between Cisco and any other company. (1110R)

CONTENTS

CHAPTER 1

Overview 1

About the ASA 5508-X and 5516-X 1

Package Contents 2

Front Panel 3

Rear Panel 3

LEDs 4

Network Ports 6

Console Ports 6

Internal and External Flash Storage 6

Solid State Drive 7

Power Supply Modules 7

Hardware Specifications 7

Power Cord Specifications 8

CHAPTER 2

Installation Preparation 17

Installation Warnings 17

Safety Recommendations 18

Maintain Safety with Electricity 18

Prevent Electrostatic Discharge Damage 19

Site Environment 19

Site Considerations 20

Power Supply Considerations 20

Equipment Rack Configuration Considerations 20

CHAPTER 3

Mount and Connect 21

Rack-mount the ASA 21

Connect Cables, Turn on Power, and Verify Connectivity 22

Connect to a Console Terminal or PC 24

Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide

Online Only iii

Connect to the Console Port with Microsoft Windows 24

Connect to the Console Port with Mac OS X 26

Connect to the Console Port with Linux 26

CHAPTER 4

Maintenance and Upgrades 27

Replace the SSD 27

Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide

iv Online Only

Contents

CHAPTER 1

Overview

This chapter describes the hardware features of the Cisco ASA 5508-X and 5516-X, and contains the following

sections:

•About the ASA 5508-X and 5516-X, page 1

•Package Contents, page 2

•Front Panel, page 3

•Rear Panel, page 3

•LEDs, page 4

•Network Ports, page 6

•Console Ports, page 6

•Internal and External Flash Storage, page 6

•Solid State Drive, page 7

•Power Supply Modules, page 7

•Hardware Specifications, page 7

•Power Cord Specifications, page 8

About the ASA 5508-X and 5516-X

The Cisco ASA 5508-X and the ASA 5516-X adaptive security appliances are part of the ASA 5500-X of

next-generation mid-range ASAs, and are built on the same security platform as the rest of the ASA family.

Your ASA 5508-X and ASA 5516-X ship with either ASA or Firepower Threat Defense software

preinstalled. To reimage your device, see Reimage the Cisco ASA or Firepower Threat Defense Device.

Note

This next-generation ASA delivers unprecedented levels of defense against threats to the network with deeper

web inspection and flow-specific analysis, improved secure connectivity via end-point security posture

Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide

Online Only 1

validation, and voice and video over VPN support. It also provides enhanced support for intelligent information

networks through improved network integration, resiliency, and scalability.

The ASA 5508-X and the ASA 5516-X are a standard 1 RU chassis. To compare the performance metrics

and capabilities of the 5500-X ASAs, see Cisco ASA 5500-X Series Next-Generation Firewalls.

Before beginning any of the procedures described in this book, be sure to read the Regulatory Compliance

and Safety Information for the Cisco ASA 5500-X Series appliances and follow proper safety procedures.

Note

Package Contents

The following figure shows the package contents for the ASA 5508-X and ASA 5516-X. Note that the contents

are subject to change, and your exact contents might contain additional or fewer items.

Figure 1: Package Contents

USB console cable (Type A to Type B)2Chassis1

Four 10-32" Phillips screws for rack

mounting

4Power cord3

4 M6 Phillip screws for rack mounting6Four 12-14 Phillips screws for rack

mounting

4 M4 Phillips screws for rack mounting7

Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide

2Online Only

Overview

Package Contents

Front Panel

The following figure shows the front panel of the ASA 5508-X. The ASA 5516 has an identical front panel.

There are 4 LEDS on the front panel. See LEDs, on page 4 for the descriptions.

Figure 2: Front Panel

Rear Panel

The following figure shows the rear panel of the Cisco ASA 5508-X. The ASA 5516-X has an identical rear

panel.

Figure 3: Rear Panel

Power cord socket

The chassis power-supply socket. See Power

Supply Modules, on page 7 for more information

about the ASA power supply.

2Power switch

Standard rocker-type power

on/off switch.

Network data ports

Eight Gigabit Ethernet RJ-45 (8P8C) network I/O

interfaces. The ports are numbered (from left to

right) 1, 2, 3, 4, 5, 6, 7, 8. Each port includes a pair

of LEDs, one each for connection status and link

status. The ports are named and numbered Gigabit

Ethernet 1/1 through Gigabit Ethernet 1/8. See

Network Ports, on page 6 for additional

information.

4Status LEDs

The locations and meanings of

the status LEDs are described

in LEDs, on page 4.

Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide

Online Only 3

Overview

Front Panel

Console ports

Two serial ports, a mini USB Type B, and a

standard RJ-45 (8P8C), are provided for

management access via an external system. See

Console Ports, on page 6 for additional

information.

6Management port

A Gigabit Ethernet interface

restricted to network

management access only.

Connect with an RJ-45 cable.

Reset button

A small recessed button that if pressed for longer

than three seconds resets the ASA to its default

“as-shipped”state following the next reboot.

Configuration variables are reset to factory default.

However, the flash is not erased, and no files are

removed.

You can use the service sw-reset-button

to disable the reset button. The default is

enabled.

Note

8USB port

A standard USB Type A port

is provided, allowing

attachment of an external

device such as mass storage.

See Internal and External

Flash Storage, on page 6 for

additional information.

SSD bay

Covered slot in which the SSD is installed. You

can replace this drive if it fails. See Replace the

SSD , on page 27 for more information.

10SSD LED

Status light for installed

solid-state drive (SSD). See

LEDs, on page 4 and Solid

State Drive, on page 7 for

more information.

LEDs

The LEDs are located just off center on the front panel, and just to the left of the network ports on the rear

panel, with the SSD LED to the right of the Reset port.

DescriptionLED

Power supply status:

•Unlit –Power supply off.

•Solid green –Power supply on.

See Power Supply Modules, on page 7 for additional power information.

Power

Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide

4Online Only

Overview

LEDs

DescriptionLED

System operating status:

•Green –Normal system function.

•Amber –Critical alarm indicating one or more of the following:

•Major failure of a hardware or software component.

•Over-temperature condition.

•Power voltage outside the tolerance range.

Status

Status of the failover pair:

•Solid green –Failover pair operating normally.

•Unlit –Failover is not operational.

Active

SSD LED behavior at first customer ship:

•Unlit –No SSD present.

•Green –SSD installed.

SSD LED behavior after June 2017:

•Unlit –No SSD present or no activity on the SSD.

•Green –Activity on the SSD.

See Replace the SSD , on page 27 for information on replacing a failed

SSD.

Note

SSD

Network Port Status

On the rear panel, a pair of LEDs (Link status and connection Status) for each of the eight Gigabit Ethernet

network ports, and the Gigabit Ethernet Management port.

Link status (L):

•Unlit –No link, or port is not in use.

•Solid green –Link established.

•Flashing green –Link activity.

Connection-speed status (S):

•One blink every three seconds –10 Mbps.

•Two rapid blinks –100 Mbps.

•Three rapid blinks –1000 Mbps.

Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide

Online Only 5

Overview

LEDs

Network Ports

Looking at the rear of the ASA, where the ports are located, port 1 is on the left, and port 8 is on the right,

next to the console and management ports. Each port is accompanied by a pair of LEDs, one each for link

status (L) and connection status (S). The ports are named and numbered Gigabit Ethernet 1/1 through Gigabit

Ethernet 1/8. The ports are named and numbered Gigabit Ethernet 1/1 through Gigabit Ethernet 1/4.

Console Ports

The ASA has two external console ports, a standard RJ-45 port and a Mini USB Type B serial port. Only one

console port can be active at a time. When a cable is plugged into the USB console port, the RJ-45 port

becomes inactive. Conversely, when the USB cable is removed from the USB port, the RJ-45 port becomes

active. The console ports do not have any hardware flow control. You can use the command-line interface

(CLI) to configure your ASA through either serial console port by using a terminal server or a terminal

emulation program on a computer.

See Connect to a Console Terminal or PC, on page 24 for the procedure to install a console terminal.

RJ-45 Port

The RJ-45 (8P8C) port supports RS-232 signaling to an internal UART controller. The RJ-45 console

port does not support a remote dial-in modem. You can use a standard management cable (Cisco part

number 72-3383-01) to convert the RJ45-to-DB9 connection if necessary.

Mini USB Type B Port

The Mini USB Type B port lets you connect to a USB port on an external computer. For Linux and

Macintosh systems, no special driver is required. For Windows systems, you must download and install

a USB driver (available on software.cisco.com). You can plug and unplug the USB cable from the

console port without affecting Windows HyperTerminal operations. We recommend shielded USB

cables with properly terminated shields. Baud rates for the USB console port are 1200, 2400, 4800,

9600, 19200, 38400, 57600, and 115200 bps.

For Windows operating systems, you must install a Cisco Windows USB Console Driver on any PC

connected to the console port before using the USB console port. See Connect to the Console Port with

Microsoft Windows, on page 24 for information on installing the driver.

Note

Internal and External Flash Storage

The ASA contains one internal USB flash drive, and a standard USB Type A port that you can use to attach

an external device. The USB port can provide output power of 5 volts, up to a maximum of 500 mA (5 USB

power units).

Internal USB Device

An embedded eUSB device is used as the internal flash; it is identified as disk0.

Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide

6Online Only

Overview

Network Ports

Autres manuels pour ASA 5508-X

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Cisco Point d'accès sans fil

Cisco

Cisco VEN501 Manuel utilisateur

Cisco

Cisco Cisco Aironet Wireless LAN Client Manuel utilisateur

Cisco

Cisco WUMC710 Manuel utilisateur

Cisco

Cisco 1700 series Manuel

Cisco

Cisco ASR 1001 Manuel

Cisco

Cisco 1130AG - Aironet - Wireless Access Point Manuel

Cisco

Cisco NCS 4201 Mode d’emploi

Cisco

Cisco ASA 5506-X Manuel utilisateur

Cisco

Cisco Aironet 2800I Series Manuel utilisateur

Cisco

Cisco Meraki MR12 Manuel utilisateur

Cisco

Cisco AIR-BR1310G-A-K9 - Aironet 1310 Outdoor Access... Manuel

Cisco

Cisco WET200 Wireless-G Business Ethernet Bridge Manuel utilisateur

Cisco

Cisco Cisco Aironet Wireless LAN Client Manuel utilisateur

Cisco

Cisco Meraki CW9162I-MR Manuel

Cisco

Cisco Wap581 Manuel utilisateur

Cisco

Cisco Aironet 1200 Series Manuel utilisateur

Cisco

Cisco AIR-LMC352 Manuel utilisateur

Cisco

Cisco Catalyst 9130AX Series Manuel utilisateur

Cisco

Cisco Aironet 521 Manuel utilisateur

Cisco

Cisco Aironet 1572EC Guide de référence rapide

Cisco

Cisco WAP131 Manuel utilisateur

Cisco

Cisco Aironet 1300 Series Manuel utilisateur

Cisco

Cisco Aironet 1520 Series Manuel utilisateur

Cisco

Cisco Aironet 1570 Series Manuel utilisateur

Manuels Point d'accès sans fil populaires d'autres marques

D-Link

D-Link DWL-2100AP - AirPlus Xtreme G Manuel utilisateur

Ubiquiti

Ubiquiti NanoStation NSM2 Manuel utilisateur

Aruba

Aruba IAP-335 Manuel utilisateur

Advantek Networks

Advantek Networks AWN-AP-54MR Manuel utilisateur

IP-COM

IP-COM AP355 Manuel utilisateur

Buffalo

Buffalo AirStation WLA-L11G Manuel utilisateur

EnGenius

EnGenius EnStationACv2 Manuel utilisateur

D-Link

D-Link DAP-3662 Manuel utilisateur

xG Technology

xG Technology xMax CN1300 Manuel utilisateur

Widelink

Widelink ezWave WAP-1100 Series Manuel utilisateur

Edimax

Edimax CAP1200 Manuel utilisateur

Ubiquiti

Ubiquiti LBE-5AC-Gen2 Manuel utilisateur

Aruba

Aruba AP-203R Manuel utilisateur

LuXout Shades

LuXout Shades LUXSHADE MOTION Manuel utilisateur

CreatComm

CreatComm TB5F Manuel utilisateur

SineDigital

SineDigital MW-1500AP(H) Manuel utilisateur

TP-Link

TP-Link AP9650 V1 Manuel utilisateur

Draytek

Draytek VIGORAP 902 Manuel utilisateur