Cisco ASA5555-K8 Installation guide

Category
Hardware firewalls
Type
Installation guide
Cisco Systems, Inc.
www.cisco.com
Cisco has more than 200 offices worldwide.
Addresses, phone numbers, and fax numbers
are listed on the Cisco website at
www.cisco.com/go/offices.
Cisco ASA 5500-X Series Hardware
Installation Guide
Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X
Released: February 28, 2012
Updated: September 18, 2014
Text Part Number: OL-32129-01
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The following information is for FCC compliance of Class A devices: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant
to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial
environment. This equipment generates, uses, and can radiate radio-frequency energy and, if not installed and used in accordance with the instruction manual, may cause
harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required
to correct the interference at their own expense.
The following information is for FCC compliance of Class B devices: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant
to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates,
uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
However, there is no guarantee that interference will not occur in a particular installation. If the equipment causes interference to radio or television reception, which can be
determined by turning the equipment off and on, users are encouraged to try to correct the interference by using one or more of the following measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.
Modifications to this product not authorized by Cisco could void the FCC approval and negate your authority to operate the product.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this
URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display
output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in
illustrative content is unintentional and coincidental.
Cisco ASA 5500-X Series Hardware Installation Guide
© 2012-2014 Cisco Systems, Inc. All rights reserved.
1
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
CONTENTS
About This Guide vii
Contents vii
Document Objectives vii
Document Conventions vii
Installation Warnings viii
Where to Find Safety and Warning Information xii
Related Documentation xii
Obtaining Documentation and Submitting a Service Request xii
CHAPTER
1 Information about the ASA 5500-X 1-1
Cisco ASA 5500-X Series Chassis Overview 1-2
Internal and External USB Flash Drives 1-2
Internal USB Drive 1-2
(Optional) External USB Drives 1-2
Online Insertion and Removal Support 1-3
FAT 32 File System 1-3
Viewing Flash Memory 1-3
Solid State Drives 1-3
Management 0/0 Interface 1-4
Alarm LED 1-4
ASA 5500-X I/O Cards 1-5
SFP Modules 1-5
ASA Chassis Panels 1-6
Front Panel LEDs 1-6
Rear Panel LEDs 1-9
Rear Panel Ports 1-11
Power Supply 1-13
Hardware Specifications 1-15
Console Cable Pinouts 1-16
RJ-45 Console Cable 1-16
RJ-45 to DB-9 Console Adapter 1-18
Contents
2
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
CHAPTER
2 Preparing for Installation 2-1
Installation Overview 2-1
Safety Recommendations 2-1
Maintaining Safety with Electricity 2-2
Preventing Electrostatic Discharge Damage 2-3
Working in an ESD Environment 2-3
General Site Requirements 2-3
Site Environment 2-4
Preventive Site Configuration 2-4
Power Supply Considerations 2-4
Configuring Equipment Racks 2-6
CHAPTER
3 Installing and Connecting the ASA 5500-X 3-1
Rack Mounting the Chassis 3-1
Rack Mounting Guidelines 3-1
Rack Mounting the ASA 5512-X, 5515-X, and 5525-X With Brackets 3-2
Rack Mounting the ASA 5500-X Chassis with Slide Rail Mounting System 3-4
Preparing the ASA 5512-X, ASA 5515-X, or ASA 5525-X to Use an Optional Slide Rail Rack Mount
System
3-4
Rack Mounting the Chassis with the Slide Rail Mounting System 3-5
Connecting Cables, Turning on Power, and Verifying Connectivity 3-13
CHAPTER
4 Maintenance and Upgrade Procedures for the ASA 5500-X 4-1
Removing and Replacing the Chassis Cover 4-1
Removing the Chassis Cover 4-1
Replacing the Chassis Cover 4-2
Installing an I/O Card 4-3
Installing an I/O Card in the Cisco ASA 5512-X, 5515-X, and 5525-X Chassis 4-3
Installing an I/O Card in the Cisco ASA 5545-X and 5555-X Chassis 4-7
Installing and Removing the SFP Modules 4-11
Installing the SFP Module 4-11
Removing the SFP Module 4-12
Removing and Installing the Power Supply 4-13
Removing and Installing the AC Power Supply 4-13
Installing the DC Input Power 4-15
Removing and Installing the DC Power Supply 4-19
Installing and Removing the Solid State Drive for the ASA CX SSP 4-21
Installation Scenarios 4-21
Contents
3
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
Installing and Removing SSDs 4-22
Contents
4
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
1
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
About This Guide
Released: February 28, 2012
Updated: September 18, 2014
This guide describes how to install and maintain the Cisco ASA 5500-X series appliances. Information
in this guide applies to the following Cisco ASA 5500-X Series models: ASA 5512-X, ASA 5515-X,
ASA 5525-X, ASA 5545-X, and ASA 5555-X. References to “Cisco ASA 5500-X Series” and “ASA”
apply to all previously listed models unless specifically noted otherwise.
This preface includes the following sections:
Document Conventions, page 1
Installation Warnings, page 2
Where to Find Safety and Warning Information, page 5
Related Documentation, page 5
Obtaining Documentation and Submitting a Service Request, page 6
Document Conventions
This document uses the following conventions:
Convention Indication
bold type Commands and keywords and user-entered text appear in bold type.
italic type Document titles, new or emphasized terms, and arguments for which you supply
values are in italic type.
[ ] Elements in square brackets are optional.
{x | y | z } Required alternative keywords are grouped in braces and separated by
vertical bars.
[ x | y | z ] Optional alternative keywords are grouped in brackets and separated by
vertical bars.
string An unquoted set of characters. Do not use quotation marks around the string, or
the string will include the quotation marks.
monospace type Terminal sessions and information the system displays appear in monospace
type.
2
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
About This Guide
Document Conventions
Note Means reader take note.
Tip Means the following information will help you solve a problem.
Caution Means reader be careful. In this situation, you might perform an action that could result in equipment
damage or loss of data.
Installation Warnings
Be sure to read the Regulatory Compliance and Safety Information document
(http://www.cisco.com/c/en/us/td/docs/security/asa/hw/regulatory/compliance/asa5500x_rcsi.html)
before installing the chassis.
This section presents these important safety warnings:
Power Supply Disconnection Warning, page 3
More than One Power Supply Warning, page 3
Jewelry Removal Warning, page 3
Wrist Strap Warning, page 3
Work During Lightning Warning, page 3
Installation Instructions Warning, page 3
Chassis Warning for Rack-Mounting and Servicing, page 3
Short-Circuit Protection Warning, page 4
SELV Circuit Warning, page 4
Ground Conductor Warning, page 4
Faceplates and Cover Panels Warning, page 4
Product Disposal Warning, page 4
Compliance with Local and National Electrical Codes Warning, page 4
TN Power Warning, page 4
Multiple Power Cords, page 5
monospace bold type Commands and keywords and user-entered text appear in monospace courier
type.
monospace italic
type
Arguments for which you supply values are in monospace italic type.
< > Non-printing characters such as passwords are presented in angle brackets.
[ ] Default responses to system prompts are presented in square brackets.
!, # An exclamation point (!) or a hash sign (#) at the beginning of a line of code
indicates a comment line.
3
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
About This Guide
Document Conventions
Circuit Breaker (15A) Warning, page 5
48 VDC Power System, page 5
Grounded Equipment Warning, page 5
Safety Cover Requirement, page 5
Power Supply Disconnection Warning
Warning
Before working on a chassis or working near power supplies, unplug the power cord on AC units;
disconnect the power at the circuit breaker on DC units.
Statement 12
More than One Power Supply Warning
Warning
This unit has more than one power supply connection; all connections must be removed completely
to completely remove power from the unit.
Statement 102
Jewelry Removal Warning
Warning
Before working on equipment that is connected to a power source, remove jewelry (including rings,
necklaces, and watches). Metal objects will heat when connected to power and ground, and can
cause serious burns or weld the metal object to the terminals.
Statement 43
Wrist Strap Warning
Warning
During this procedure, wear grounding wrist straps to avoid ESD damage to the card. Do not directly
touch the backplane with your hand or any metal tool, or you could receive a shock.
Statement 94
Work During Lightning Warning
Warning
Do not work on the system, or connect or disconnect cables during periods of lightning.
Statement
1001
Installation Instructions Warning
Warning
Read all installation instructions before connecting the system to a power source.
Statement 1004
Chassis Warning for Rack-Mounting and Servicing
Warning To prevent bodily injury when mounting or servicing this unit in a rack, you must take special precautions to
ensure that the system remains stable. The following guidelines are provided to ensure your safety: This unit
should be mounted at the bottom of the rack if it is the only unit in the rack. When mounting this unit in a partially
4
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
About This Guide
Document Conventions
filled rack, load the rack from the bottom to the top with the heaviest component at the bottom of the rack.If the
rack is provided with stabilizing devices, install the stabilizers before mounting or servicing the unit in the rack.
Statement 1006
Short-Circuit Protection Warning
Warning
This product requires short-circuit (overcurrent) protection, to be provided as part of the building
installation. Install only in accordance with national and local wiring regulations.
Statement 1045
SELV Circuit Warning
Warning
To avoid electric shock, do not connect safety extra-low voltage (SELV) circuits to telephone-network
voltage (TNV) circuits. LAN ports contain SELV circuits, and WAN ports contain TNV circuits. Some
LAN and WAN ports both use RJ-45 connectors. Use caution when connecting cables.
Statement 1021
Ground Conductor Warning
Warning
This equipment must be grounded. Never defeat the ground conductor, or operate the equipment in the
absence of a suitably installed ground conductor. Contact the appropriate electrical inspection
authority, or an electrician if you are not certain that suitable grounding is available.
Statement 1024
Faceplates and Cover Panels Warning
Warning
Blank faceplates and cover panels serve three important functions: they prevent exposure to
hazardous voltages and currents inside the chassis; they restrict electromagnetic interference
(EMI) that might disrupt other equipment; and they direct the flow of cooling air through the chassis.
Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place.
Statements 1029 and 142
Product Disposal Warning
Warning
Ultimate disposal of this product should be handled according to all national laws and regulations.
Statement 1040
Compliance with Local and National Electrical Codes Warning
Warning
Installation of the equipment must comply with local and national electrical codes.
Statement 1074
TN Power Warning
Warning
The device is designed to work with TN power systems.
Statement 19
5
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
About This Guide
Document Conventions
Multiple Power Cords
Warning
This unit has more than one power cord. To reduce the risk of electric shock when servicing a unit,
disconnect the power cord of the power strip into which the unit is plugged.
Statement 137
Circuit Breaker (15A) Warning
Warning
This product relies on the building’s installation for short-circuit (overcurrent) protection. Ensure that
a fuse or circuit breaker no larger than 120 VAC, 15A U.S. (240 VAC, 10A international) is used on the
phase conductors (all current-carrying conductors).
Statement 13
48 VDC Power System
Warning
The customer 48-volt power system must provide reinforced insulation between the primary AC power
and the 48 VDC output.
Statement 128
Grounded Equipment Warning
Warning
This equipment is intended to be grounded. Ensure that the host is connected to earth ground during
normal use.
Statement 39
Safety Cover Requirement
Warning
The safety cover is an integral part of the product. Do not operate the unit without the safety cover
installed. Operating the unit without the cover in place will invalidate the safety approvals and pose
a risk of fire and electrical hazards.
Statement 117
Where to Find Safety and Warning Information
For safety and warning information, see the Regulatory Compliance and Safety Information document
at the following URL:
http://www.cisco.com/c/en/us/td/docs/security/asa/hw/regulatory/compliance/asa5500x_rcsi.html
This RCSI document describes the international agency compliance and safety information for the
Cisco ASA 5500-X series. It also includes translations of the safety warnings used in this guide.
Related Documentation
For a complete list of the Cisco ASA 5500-X series documentation and where to find it, see the
documentation roadmap at the following URL:
http://www.cisco.com/en/US/docs/security/asa/roadmap/asaroadmap.html
6
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
About This Guide
Obtaining Documentation and Submitting a Service Request
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a
service request, and gathering additional information, see Whats New in Cisco Product Documentation
at: http://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html.
Subscribe to What’s New in Cisco Product Documentation, which lists all new and revised
Cisco technical documentation, as an RSS feed and deliver content directly to your desktop using a
reader application. The RSS feeds are a free service.
CHAPTER
1-1
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
1
About the ASA 5500-X
This chapter describes the Cisco ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X models. We
recommend that you read this entire guide before beginning any of the procedures contained herein.
Warning
Only trained and qualified personnel should install, replace, or service this equipment
.
Statement 49
Caution Read the safety warnings in the Regulatory Compliance and Safety Information document for the Cisco
ASA 5500-X (http://www.cisco.com/go/asa5500x-compliance), and follow proper safety procedures
when performing any tasks in this guide.
This chapter includes the following topics:
Package Contents, page 1-1
Internal and External USB Flash Drives, page 1-3
Solid State Drives, page 1-4
Alarm LED, page 1-4
ASA 5500-X I/O Cards, page 1-4
SFP Modules, page 1-5
ASA Chassis Panels, page 1-7
Power Supply, page 1-14
Hardware Specifications, page 1-16
Package Contents
This section lists the package contents of each chassis. Note that contents are subject to change, and your
exact contents might contain additional or fewer items.
ASA 5512-X, ASA 5515-X, or ASA 5525-X, page 1-2
ASA 5545-X and ASA 5555-X, page 1-2
1-2
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
Chapter 1 About the ASA 5500-X
Package Contents
ASA 5512-X, ASA 5515-X, or ASA 5525-X
ASA 5545-X and ASA 5555-X
1 ASA 5512-X, ASA 5515-X, or ASA 5525-X
Chassis
2 Blue Console Cable and Serial PC Terminal
Adapter (DB-9 to RJ-45)
3 Power Cord 4 Power Cord Retainer
5 4 10-32 Phillips Screws for rack mounting 6 4 12-24 Phillips Screws for rack mounting
7 4 M6 Phillips Screws for rack mounting
1 ASA 5545-X or ASA 5555-X Chassis
(one power supply shown)
2 Blue Console Cable and Serial PC Terminal
Adapter (DB-9 to RJ-45)
3 Power Cord 4 Power Cord Retainer
5 Rack-Mount Bracket Kit
1
3 4
2
330545
76
5
330544
1
3
2
4
5
1-3
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
Chapter 1 About the ASA 5500-X
Internal and External USB Flash Drives
Internal and External USB Flash Drives
The Cisco ASA 5500-X has internal and (optional) external USB drives.
Internal USB Drive, page 1-3
External USB Drives (Optional), page 1-3
USB Online Insertion and Removal, page 1-3
FAT-32 File System, page 1-3
Internal USB Drive
An embedded USB (eUSB) device is used as the internal flash (disk0). See Hardware Specifications,
page 1-16 for the size shipped with each model.
External USB Drives (Optional)
The ASA 5500-X supports external USB flash drives for data storage. The ASA 5500-X uses disk1 as
the external USB flash drive identifier. When the ASA is powered on, an inserted USB flash drive is
mounted to disk1 and available for you to use. Additionally, the file system commands that are available
to disk 0 are also available to disk1, including copy, format, delete, mkdir, pwd, cd, and so on. When
you remove the USB flash drive, the system unmounts disk1, and disk1 becomes an invalid file system
label that you can no longer access.
If you insert a USB drive with more than one partition, only the first partition is mounted.
USB Online Insertion and Removal
While the ASA back panel has two USB slots, only one is supported for online insertion and removal
(OIR), with priority given to the USB drive that was inserted first. For example, based on the time
sequence, the first inserted USB flash drive is mounted to disk1, regardless of the slot in which you insert
it. When you insert a second USB device, an error message appears on the console to notify you that an
extra, unsupported USB flash drive exists. Removing either one of the USB devices does not change the
priority that you just established. To change the priority you must safely remove the USB device and
begin again to establish the desired priority.
FAT-32 File System
The ASA 5500-X supports only FAT-32-formatted file systems for the eUSB and external USB drives.
If you insert an external USB drive that is not in FAT-32 format, the system mounting process fails, and
you receive an error message. You can enter the format disk1: command to format the partition to FAT
32 and mount the partition to disk1 again; however, data might be lost.
1-4
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
Chapter 1 About the ASA 5500-X
Solid State Drives
Solid State Drives
You must install a Cisco Solid State Drive (SSD) for use with the some software modules. Only Cisco
SSDs are supported. You can install one SSD in the ASA 5512-X, ASA 5515-X, and ASA 5525-X. You
can install two SSDs in a RAID 1 configuration in the ASA 5545-X and ASA 5555-X.
Note When you install an SSD for the first time, you must reload the ASA and then re-image the installed
module.
The SSD is hot-swappable. The SSD resides in a carrier, which you install into the drive bay. You can
use the SSD with an AC or DC power supply. See Install and Remove a Solid State Drive for a Services
Module, page 4-22 for more information.
Alarm LED
The ASA 5500-X performs autonomous environmental monitoring, polling all external sensors and
monitoring operating conditions. In the event of damage to certain internal components, or surpassed
temperature thresholds, the system activates an alarm LED to notify you of a critical condition. For
example, the alarm LED is activated by firmware in the event of various critical over-voltage and
over-temperature conditions, as well as when the ASA has missing or unrecognized internal chip
components. When the alarm LED lights, you can find details about the system condition from the
system message that appears on the console, or by entering the show environment or show controller
pci CLI commands.
Note If you remove one of the power-supply modules from an ASA with redundant power supplies—in other
words, one with two power supplies installed—the Alarm LED will light. To turn off the light, you must
power-cycle the chassis; that is, turn it completely off and then turn it back on. See Power Supply,
page 1-14 for more information about the redundant power-supply configuration. See Remove and
Install the Power Supply, page 4-14 for more information about removing a power supply.
ASA 5500-X I/O Cards
The ASA 5500-X six-port GigabitEthernet interface cards extend the I/O capabilities of the
ASA 5525-X, ASA 5545-X, and ASA 5555-X models by providing additional GigabitEthernet ports.
The I/O cards provide the following benefits:
Segmentation of network traffic into separate security zones
Fiber-optic cable connectivity for communications over long distances
Load-sharing of traffic, and protection against link failure, using EtherChannel
Support for Jumbo Ethernet frames of up to 9000 bytes
Protection for Active/Active failover, and for full-mesh firewall deployments against cable failure
For information about installing an I/O card in your ASA, see Chapter 4, “Maintenance and Upgrade
Procedures for the ASA 5500-X.
1-5
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
Chapter 1 About the ASA 5500-X
SFP Modules
SFP Modules
The ASA uses field-replaceable small form-factor pluggable (SFP) modules to establish Gigabit
Ethernet connections. Table 1-1 lists the supported SFP modules.
Use only Cisco-certified SFP modules on the ASA. Each SFP module has an internal serial EEPROM
that is encoded with security information. This encoding allows Cisco to identify and validate that the
SFP module meets the requirements for the ASA.
All SFP ports require cables with LC-type connectors. Minimum cable distance for all SFPs listed (both
SMF and MMF) is 2 m (6.5 feet); cables must not exceed specified cable lengths for reliable
communications. Table 1-2 lists the fiber-optic cable requirements.
Table 1-1 Supported SFP Modules
SFP Module Type of Connection Cisco Part Number
1000BASE-T Copper, twisted pair (RJ-45) GLC-T=
1000BASE-EX Single-mode fiber (SMF) GLC-EX-SMD=
1000BASE-ZX SMF GLC-ZX-SMD=
1000BASE-SX Multi-mode fiber (MMF) GLC-SX-MM=
1000BASE-LX/LH MMF/SMF GLC-LH-SM=
1-6
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
Chapter 1 About the ASA 5500-X
SFP Modules
Table 1-2 Cabling Requirements for Fiber-optic SFP Modules
SFP Module Wavelength Fiber Type Core Size
Modal Bandwidth
(MHz-km)
1
1. Specified at transmission wavelength.
Operating
Distance
1000BASE-EX
(GLC-EX-SMD=)
1310 nm SMF
2
2. ITU-T G.652 SMF as specified by the IEEE 802.3z standard.
40 km (131,234 ft)
1000BASE-ZX
(GLC-ZX-SMD=)
1550 nm SMF ~70 km, depending
on link loss
1000BASE-SX
(GLC-MM=)
850 nm MMF 62.5 µm 160 (FDDI grade) 220 m (722 ft)
62.5 µm 200 (OM1) 275 m (902 ft)
50 µm 400 (400/400) 500 m (1640 ft)
50 µm 500 (OM2) 550 m (1804 ft)
50 µm 2000 (OM3) 1000 m (3281 ft)
1000BASE-LX/LH
(GLC-SM=)
1310 nm MMF
3
3. An IEEE-standard, mode-conditioning patch cord is required regardless of span length. Note that the mode-conditioning
patch cord for 62.5-µm fiber has a different specification than the patch cord for 50-µm fiber.
62.5 µm 500 550 m (1804 ft)
50 µm 400 550 m (1804 ft)
50 µm 500 550 m (1804 ft)
SMF 10 km (32,821 ft)
1-7
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
Chapter 1 About the ASA 5500-X
ASA Chassis Panels
ASA Chassis Panels
This section describes the front and rear ASA panels, and includes the following topics:
Front Panel LEDs, page 1-7
Rear Panel LEDs, page 1-10
Rear Panel Ports, page 1-12
Front Panel LEDs
Figure 1-1 shows the front panel LEDs for the ASA 5512-X, ASA 5515-X, and ASA 5525-X models.
Figure 1-1 Front Panel LEDs for the Cisco ASA 5512-X, ASA 5515-X, and ASA 5525-X
LED Description
1 Power button A soft switch that turns the system on and off. Once pressed, the
button stays in the “on” position:
On—The power symbol on the button is lit.
Off—The power symbol on the button is dark.
For information about the power state, see the Power Supply
Considerations, page 2-3.
2 Hard-disk release button Releases the hard disk from the device.
Cisco ASA 5515
Adapative Security Appliance
BOOT
ACTIVE
PS
ALARM
VPN
HD
282360
Cisco ASA 5515
Adapative Security Appliance
BOOT
ACTIVE
PS
ALARM
VPN
HD
1
2
5
8
7
6
3
4
1-8
Cisco ASA 5500-X Series Hardware Installation Guide
OL-32129-01
Chapter 1 About the ASA 5500-X
ASA Chassis Panels
3 Alarm System operating status:
Off—Normal operating system function.
Solid amber—Critical Alarm indicating one or more of
the following:
a major failure of a hardware or software component.
an over-temperature condition.
power voltage is outside of the tolerance range.
Note May appear red on some devices.
4 VPN VPN tunnel status:
Solid green—VPN tunnel is established.
Off—No VPN tunnel established.
5 HD Hard Disk Drive status:
Flashing green—Proportioned to read/write activity.
Solid amber—Hard-disk drive failure.
Off—No hard-disk drive present.
6 PS Power supply status
7 Active Status of the failover pair:
Solid green—Failover pair is operating normally.
Off—Failover is not operational.
8 Boot Power-up diagnostics:
Flashing green—Power-up diagnostics are running, or system
is booting.
Solid green—System has passed power-up diagnostics.
Off—Power-up diagnostics are not operational.
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14
  • Page 15 15
  • Page 16 16
  • Page 17 17
  • Page 18 18
  • Page 19 19
  • Page 20 20
  • Page 21 21
  • Page 22 22
  • Page 23 23
  • Page 24 24
  • Page 25 25
  • Page 26 26
  • Page 27 27
  • Page 28 28
  • Page 29 29
  • Page 30 30
  • Page 31 31
  • Page 32 32
  • Page 33 33
  • Page 34 34
  • Page 35 35
  • Page 36 36
  • Page 37 37
  • Page 38 38
  • Page 39 39
  • Page 40 40
  • Page 41 41
  • Page 42 42
  • Page 43 43
  • Page 44 44
  • Page 45 45
  • Page 46 46
  • Page 47 47
  • Page 48 48
  • Page 49 49
  • Page 50 50
  • Page 51 51
  • Page 52 52
  • Page 53 53
  • Page 54 54
  • Page 55 55
  • Page 56 56
  • Page 57 57
  • Page 58 58
  • Page 59 59
  • Page 60 60
  • Page 61 61
  • Page 62 62
  • Page 63 63
  • Page 64 64
  • Page 65 65
  • Page 66 66
  • Page 67 67
  • Page 68 68
  • Page 69 69
  • Page 70 70
  • Page 71 71
  • Page 72 72
  • Page 73 73
  • Page 74 74
  • Page 75 75
  • Page 76 76

Cisco ASA5555-K8 Installation guide

Category
Hardware firewalls
Type
Installation guide

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI