Cisco ASA 5512-X Hardware Installation Manual

Cisco ASA 5512-X Hardware Installation Manual

Hide thumbs Also See for ASA 5512-X:

Advertisement

Cisco ASA 5512-X, ASA 5515-X, ASA
5525-X, ASA 5545-X, and ASA 5555-X
Hardware Installation Guide
First Published:
February 28, 2012
Last Updated:
June 29, 2016
Cisco Systems, Inc.
www.cisco.com

Advertisement

Table of Contents
loading

Summary of Contents for Cisco ASA 5512-X

  • Page 1 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide First Published: February 28, 2012 Last Updated: June 29, 2016 Cisco Systems, Inc. www.cisco.com...
  • Page 2 Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company.
  • Page 3: About This Guide

    This guide describes how to install and maintain the Cisco ASA 5500-X series appliances. Information in this guide applies to the following Cisco ASA 5500-X Series models: ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X. References to “Cisco ASA 5500-X Series” and “ASA” apply to all previously listed models unless specifically noted otherwise.
  • Page 4: Installation Warnings

    Warning: This unit has more than one power supply connection; all connections must be removed completely to completely remove power from the unit. Statement 102 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 5 Statements 1029 and 142 Product Disposal Warning Warning: Ultimate disposal of this product should be handled according to all national laws and regulations. Statement 1040 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 6: Where To Find Safety And Warning Information

    Cisco ASA 5500-X series. It also includes translations of the safety warnings used in this guide. Related Documentation For a complete list of the Cisco ASA 5500-X series documentation and where to find it, see the documentation roadmap at the following URL: http://www.cisco.com/en/US/docs/security/asa/roadmap/asaroadmap.html...
  • Page 7: Obtaining Documentation And Submitting A Service Request

    Obtaining Documentation and Submitting a Service Request Obtaining Documentation and Submitting a Service Request For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see What’s New in Cisco Product Documentation.
  • Page 8 About This Guide Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 9: Package Contents

    About the ASA 5500-X This chapter describes the Cisco ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X models. We recommend that you read this entire guide before beginning any of the procedures contained herein. Warning: Only trained and qualified personnel should install, replace, or service this equipment...
  • Page 10 Rack-Mount Bracket Kit Internal and External USB Flash Drives The Cisco ASA 5500-X has internal and (optional) external USB drives.  Internal USB Drive, page 11 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 11: Solid State Drives

    You must install a Cisco Solid State Drive (SSD) for use with the some software modules. Only Cisco SSDs are supported. You can install one SSD in the ASA 5512-X, ASA 5515-X, and ASA 5525-X. You can install two SSDs in a RAID 1 configuration in the ASA 5545-X and ASA 5555-X.
  • Page 12: Alarm Led

    The ASA uses field-replaceable small form-factor pluggable (SFP) modules to establish Gigabit Ethernet connections. Use only Cisco-certified SFP modules on the ASA. Each SFP module has an internal serial EEPROM that is encoded with security information. This encoding allows Cisco to identify and validate that the SFP module meets the requirements for the ASA.
  • Page 13: Front Panel Leds

    Rear Panel Ports, page 17 Front Panel LEDs Figure 1 shows the front panel LEDs for the ASA 5512-X, ASA 5515-X, and ASA 5525-X models. Figure 1 Front Panel LEDs for the Cisco ASA 5512-X, ASA 5515-X, and ASA 5525-X...
  • Page 14 For information about the power state, see Power Supply Considerations, page Hard-disk slot Indicates the slot for hard-disk 1. Hard-disk release button Releases hard-disk 1 from the device. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 15 Solid green—System has passed power-up diagnostics.  Off—Power-up diagnostics are not operational. Rear Panel LEDs Figure 3 shows the rear panel LEDs for the ASA 5500-X. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 16 Off—No hard-disk drive present. Hard Disk Drive 1 status:  Flashing green—Proportioned to read/write activity.  Solid amber—Hard-disk drive failure.  Off—No hard-disk drive present. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 17: Rear Panel Ports

    Description Management 0/0 The GigabitEthernet interface that is restricted to management use only. interface Connect with an RJ-45 cable. Power supply The chassis power supply. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 18: Power Supply

    Power Supply The ASA 5512-X, ASA 5515-X, and ASA 5525-X ship with one fixed fan and one fixed power supply (AC or DC) installed. The ASA 5545-X and ASA 5555-X ship with one power supply (AC or DC) installed.
  • Page 19 The AC power supply consumes a maximum of 471 W of input power. When the Cisco ASA 5500-X operates on AC power, it supports the ability to restore the previous power state of the system in the event that AC power is lost.
  • Page 20 The warning event can be temperature, voltage, current, or fan operating outside the normal operating range. The power supply is shut down. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 21: Hardware Specifications

    Altitude 15,000 ft. 15,000 ft. 15,000 ft. 15,000 ft. 15,000 ft. For additional specifications, see the product data sheet at the following URL: http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-x-series-next-generation-firewalls/data- sheet-c78-729807.html Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 22: Power Cord Specifications

    NBR 14136 IEC 60320/C13 AC power cord (Brazil) CAB-AC-C13-KOR 250V KSC8305 IEC 60320/C13 AC power cord (Korea) CAB-ACTW 250V CNS10917 IEC 60320/C13 AC power cord (Taiwan) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 23 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Figure 3-9 CAB-AC (North America) Plug: NEMA 5-15P Cord set rating: 10A, 125V Connector: IEC 60320/C13 Figure 3-10 CAB-ACA (Australia) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 24 Plug: CE123-16-VII Cord set rating: 10A, 250V Connector: IEC 60320/C13 Figure 3-12 CAB-ACR (Argentina) Plug: IRAM 2073 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 25 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Figure 3-14 CAB-ACU (United Kingdom) Plug: BS1363a/SS145 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Figure 3-15 CAB-JPN-3PIN (Japan) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 26 Plug: SABS 1661 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Figure 3-17 CAB-ACC (China) Plug: GB2009.1-2008 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 27 Plug: IS 6538-1971 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Figure 3-19 CAB-C13-ACB (Brazil) Plug: NBR 14136 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 28 CAB-AC-C13-KOR (Korea) Plug: KSC8305 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Figure 3-21 CAB-ACTW (Taiwan) Plug: CNS10917 Cord set rating: 10A, 250V Connector: IEC 60320/C13 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 29: Preparing For Installation

    If you need to remove the chassis cover to install a hardware component, such as additional memory or an interface card, doing so does not affect your Cisco warranty. Upgrading the ASA does not require any special tools and does not create any radio frequency leaks.
  • Page 30: Preventing Electrostatic Discharge Damage

    Improper placement can also make it difficult for you to access the chassis for maintenance. For information about physical specifications, see Hardware Specifications, page Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 31: Preventive Site Configuration

    Chassis Coupler North America CAB-AC (72-0259) 8.2 ft (2.5 m) 125 VAC, 10 A Australia, CAB-ACA 8.2 ft (2.5 m) 250 VAC, 10 A (72-0746-01) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 32 250 VAC, 10 A (72-1925-01) India CAB-IND-10A 8.2 ft (2.5 m) 250 VAC, 10 A (37-0863-01) South Africa AIR-PWR-CORD-SA 8.2 ft (2.5 m) 250 VAC, 10 A (37-0346-01) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 33: Configuring Equipment Racks

    Baffles can help to isolate exhaust air from intake air, which also helps to draw cooling air through the chassis. The best placement of the baffles depends on the airflow patterns in the rack. Experiment with different arrangements to position the baffles effectively. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 34 Preparing for Installation General Site Requirements Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 35: Rack Mount The Chassis

    Connecting Cables, Turning on Power, and Verifying Connectivity, page 45 Rack Mount the Chassis The ASA 5512-X, 5515-X, and 5525-X chassis ship with rack mount brackets installed on the front of the chassis. 5545-X and 5555-X chassis ship with the slide rail mounting system.
  • Page 36 We recommend that you install the chassis with the front bezel facing the cold aisle. (See Figure 3 for an example of air flow from front to back.) Figure 3 Airflow Direction Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 37 ASA 5500-X series chassis, as well.  Prepare an ASA 5512-X, ASA 5515-X, or ASA 5525-X to Use a Slide Rail Rack Mount System, page 37 ...
  • Page 38 Install two shoulder screws into the threaded hole locations on either side of the chassis (see Figure 7 for one side), and ensure that they are tight. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 39 For the procedure for attaching the brackets to the front or back of the chassis, see Rack Mount the ASA 5512-X, 5515-X, and 5525-X With Brackets, page Before You Begin  Verify the box contents Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 40 Use a Phillips screwdriver to secure the inner slide rail with one Phillips screw (B). Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 41 For racks shorter than 24 inches in depth, remove the rear bracket with a Phillips head screwdriver, pull the release tab, and adjust the slide rail to the appropriate length for the rack. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 42 The following illustration shows the casing pulled back on the inner peg. The rail can be installed in three different rack types. The following illustration shows a rail installed in a threaded rail rack. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 43 Align the inner slide rails on the unit to the middle outer slide rails. Push the inner slide rails into the middle outer slide rails until they lock into place. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 44 Press the side release tabs to unlock the inner slide rail, and push the chassis into the rack. Secure the chassis to the rack with the front captive screws. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 45 Follow these steps to connect cables, turn on power, and verify connectivity. Procedure Place the chassis on a flat, stable surface, or in a rack (if you are rack-mounting it.) Connect the interface cables. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 46 See the Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Quick Start Guide further instructions on how to set up your device. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 47 Your ASA 5500-X ships with either ASA or Firepower Threat Defense software preinstalled. To reimage your device, see Reimage the Cisco ASA or Firepower Threat Defense Device. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 48 Installing and Connecting the ASA 5500-X Connecting Cables, Turning on Power, and Verifying Connectivity Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 49: Remove The Chassis Cover

    1. You may need to use a screwdriver if the screw is too tight. Note: Removing the chassis cover does not affect your Cisco warranty. Upgrading the ASA does not require any special tools and does not create any radio frequency leaks. Cisco Systems, Inc.
  • Page 50 (See Figure Figure 2 Replacing the Chassis Cover Thumbscrew Re-install the chassis on a rack. Re-install the network interface cables. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 51 You can add or replace an expansion I/O card in the ASA 5500-X series chassis. These cards provide six additional GigabitEthernet copper or small form-factor pluggable (SFP) ports.  Install an I/O Card in the Cisco ASA 5512-X, 5515-X, and 5525-X Chassis, page 51  Install an I/O Card in the Cisco ASA 5545-X and 5555-X Chassis, page 54...
  • Page 52 -53.) Use firm upward pressure and a gentle rocking motion, as the card is firmly seated. Caution: Keep hands clear of all electronics underneath the card cover. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 53 Connect the blue connector end of the Regex ribbon cable to the motherboard, and close the green tab. Install the chassis cover, and replace the chassis in the rack. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 54 To expose the blue connector on the end of the Regex flexible circuit, push down on the center of the green connector clamp, and lift the end of the clamp to release the lock. (See Figure Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 55 (See Figure 11.) Use firm upward pressure and a gentle rocking motion, as the card is firmly seated. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 56 The small black plastic guide slides all the way into the chassis. The two hooks on the assembly plug into the two slots on the edge of the chassis. Figure 12 Inserting a New I/O Card Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 57: Install And Remove Sfp Modules

    SFP Module Support Use only Cisco certified SFP modules on the ASA. Each SFP module has an internal serial EEPROM that is encoded with security information. This encoding provides a way for Cisco to identify and validate that the SFP module meets the requirements for the ASA.
  • Page 58 Latch designs are not linked to SFP model or technology types. For information about SFP models and technology types, see the label on the side of your SFP. To remove the SFP module, perform the following steps. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 59 120 VAC, 20A U.S. (240 VAC, 10A international). Statement 1005 To remove and install an AC power supply, follow these steps. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 60 Install the new power supply by aligning it with the power supply bay and pushing it into place until it is seated while supporting it from beneath with the other hand. (See Figure 18.) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 61 Before performing any of the following procedures, ensure that power is removed from the DC circuit. Statement 1003 Warning: Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Statement 1030 Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 62 DC input power supply. Figure 20 shows the back panel of the ASA 5512-X, ASA 5515-X, and ASA 5525-X with the DC power supply. Figure 20 ASA 5512-X, ASA 5515-X, and ASA 5525-X Back Panel...
  • Page 63 (see Figure 23 on page -64): — Ground lead wire (middle) — Positive (+) lead wire (left) — Negative (–) lead wire (right) Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 64 Only wires with insulation should extend from the DC power supply. Repeat Step 7 for the remaining two DC input power source wires: the positive lead wire and the negative lead wire. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 65 (See Figure 26.) Save the slot cover for future use. Continue with 7.. Figure 26 Removing the Slot Cover Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 66 Figure 29.) Figure 29 Installing the DC Power Supply To connect the DC input power source wires, see though Install the DC Input Power, page Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 67: Installation Scenarios

    If you need to remove an old drive, on the front panel of the ASA, remove the SSD by pressing the button on the right side of the bay until the locking lever is released. Pull out the SSD. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 68 ASA 5545/5555-X models. Figure 33 Installing an SSD in the ASA 5512/5515/5525-X Figure 34 Installing an SSD in the ASA 5545-X and ASA 5555-X Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 69 SSDs are now active. If you replaced the drive in the ASA 5512-X, ASA 5515-X, or ASA 5525-X, you need to re-install the module using appropriate boot image. For more information, refer to the list of ASA-related Quick Start guides on cisco.com:...
  • Page 70 Maintenance and Upgrade Procedures for the ASA 5500-X Install and Remove a Solid State Drive for a Services Module Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 71: Identifying Cable Pinouts

    Figure 1 10/100 Port Pinouts Label 4 5 6 7 8 Figure 2 shows the 10BaseT, 100BaseTX, and 1000BASE-T connector (RJ-45). Cisco Systems, Inc. www.cisco.com Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 72: Console Port (Rj-45)

    Crossover—The first (far left) colored wire at one end of the cable is the third colored wire at the other end of the cable. Table 1 lists the rolled (console) cable pinouts for RJ-45. Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 73 10/100/1000BASE-T Management Port Cable Pinouts (MDI). (See Figure 2 an illustration of the pinouts.) Table 3 10/100/1000BASE-T Management Port Cable Pinouts (MDI) Signal TP0+ TP0- TP1+ TP2+ TP2- Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...
  • Page 74: Gigabit And Fibre Channel Ports

    Cisco Product Wavelength Core Size Baud Cable Number (nanometer) (micron) Rate Distance GLC-SX-MM= 62.5 1.0625 300 m 50.0 1.0625 500 m GLC-LH-SM= 1300 1.0625 10 km Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide...

This manual is also suitable for:

Asa 5515-xAsa 5525-xAsa 5545-xAsa 5555-x

Table of Contents