Cisco Systems 78-16409-03 User Manual

APPENDIX

Maintenance and Upgrade Procedures

This appendix describes how to install and replace the Cisco Security Services Modules (SSM), the chassis cover, the power supply, and the CompactFlash. This appendix includes the following sections:

• Installing and Replacing the 4GE SSM, page A-1

• Installing and Replacing the ASA SSM 10/20, page A-8

• Removing and Replacing the Chassis Cover, page A-10

• Working in an ESD Environment, page A-13

• Removing and Replacing the Power Supply, page A-13

• Installing the DC Model, page A-17

• Removing and Replacing the CompactFlash, page A-19

Installing and Replacing the 4GE SSM

The 4GE Security Services Module (SSM) has eight Ethernet ports: four 10/100/1000 Mbps, copper, RJ-45 ports or four optional 1000 Mbps, small form-factor pluggable (SFP) fiber ports.

This section describes how to install and replace the 4GE SSM in the adaptive security appliance, and includes the following sections:

• Overview, page A-2

• Installing the 4GE SSM, page A-3

• Replacing the 4GE SSM, page A-4

• Installing and Removing the SFP Modules, page A-4

78-16409-03

Cisco ASA 5500 Series Hardware Installation Guide

A-1

Installing and Replacing the 4GE SSM

Overview

Figure A-1 lists the 4GE SSM ports and LEDs.

Figure A-1 4GE SSM Ports and LEDs

Appendix A Maintenance and Upgrade Procedures

132983

LNK

Cisco SSM-4GE

SPD0123

1 RJ-45 ports 2 RJ-45 Link LED

3 RJ-45 Speed LED 4 Power LED

5 Status LED 6 SFP ports

7 SFP Link LED 8 SFP Speed LED

Note Figure A-1 shows SFP modules installed in the ports slots. You must order and install the SFP modules

if you want to use this feature. For more information on SFP ports and modules, see the “Installing and

Removing the SFP Modules” section on page A-4.

Table A-1 describes the 4GE SSM LEDs.

A-2

Table A-1 4GE SSM LEDs

LED Color State Description

2, 7 LINK Green Solid There is an Ethernet link.

Flashing There is Ethernet activity.

3, 8 SPEED Off

Green

Amber

10 MB There is no network activity.

100 MB There is network activity at 100 Mbps.

1000 MB (GigE) There is network activity at 1000 Mbps.

4 POWER Green On The system has power.

5 STATUS Green

Green

Amber

Cisco ASA 5500 Series Hardware Installation Guide

Flashing The system is booting.

Solid The system booted correctly.

Solid The system diagnostics failed.

78-16409-03

Appendix A Maintenance and Upgrade Procedures

Installing the 4GE SSM

To install a new 4GE SSM for the first time, perform the following steps:

Step 1 Power off the adaptive security appliance.

Step 2 Locate the grounding strap from the accessory kit and fasten it to your wrist so that it contacts your bare

skin. Attach the other end to the chassis.

Step 3 Remove the two screws (as shown in Figure A-2) at the left rear end of the chassis, and remove the slot

cover.

Figure A-2 Removing the Screws from the Slot Cover

Installing and Replacing the 4GE SSM

MGMT

USB2

USB1

LINK SPD

FLASH

POWER

STATUS

VPN

ACTIVE

119642

Step 4

Insert the 4GE SSM through the slot opening as shown in Figure A-3.

Figure A-3 Inserting the 4GE SSM into the Slot

MGMT

USB2

LNK

Cisco SSM-4GE

SPD0

T A T

POW

USB2

USB1

LINK SPD

FLASH

POW

STATUS

VPN

ACTIVE

FLASH

Step 5 Attach the screws to secure the 4GE SSM to the chassis.

Step 6 Power on the adaptive security appliance.

Step 7 Check the LEDs. If the 4GE SSM is installed properly the STATUS LED flashes during boot up and is

solid when operational.

Step 8 Connect one end of the RJ-45 cable to the port and the other end of the cable to your network devices. For

more information, see the “Connecting the Interface Cables” section.

132984

78-16409-03

Cisco ASA 5500 Series Hardware Installation Guide

A-3

Installing and Replacing the 4GE SSM

Replacing the 4GE SSM

To replace an existing 4GE SSM, perform the following steps:

Step 1 Enter the hw-mod mod 1 shut command in privileged EXEC mode. Verify that the module is down by

making sure that the LEDs are all off.

Step 2 Locate the grounding strap from the accessory kit and fasten it to your wrist, so that it contacts your bare

skin. Attach the other end to the chassis.

Step 3 Remove the two screws at the left rear end of the chassis.

Step 4 Remove the 4GE SSM. Place it in a static bag and set it aside.

Step 5 Replace the existing card by inserting the new 4GE SSM through the slot opening.

Step 6 Attach the screws to secure the 4GE SSM to the chassis.

Step 7 Power on the adaptive security appliance.

Step 8 Enter the hw-mod mod 1 reset command in privileged EXEC mode to reset the 4GE SSM.

Step 9 Check the LEDs. If the 4GE SSM is installed properly, the POWER LED is solid green and the STATUS

LED is flashing during boot up.

Step 10 Connect the RJ-45 cable to the port and the other end of the cable to your network devices. For more

information, see the “Connecting the Interface Cables” section.

Appendix A Maintenance and Upgrade Procedures

Installing and Removing the SFP Modules

The SFP is a hot-swappable input/output device that plugs into the SFP ports. The following SFP module types are supported:

• Long wavelength/long haul 1000BASE-LX/LH (GLC-LH-SM=)

• Short wavelength 1000BASE-SX (GLC-SX-MM=)

This section describes how to install and remove the SFP modules in the adaptive security appliance to provide optical Gigabit Ethernet connectivity. It contains the following sections:

• SFP Module, page A-5

• Installing the SFP Module, page A-6

• Removing the SFP Module, page A-7

A-4

Cisco ASA 5500 Series Hardware Installation Guide

78-16409-03

Appendix A Maintenance and Upgrade Procedures

SFP Module

The adaptive security appliance uses a field-replaceable SFP module to establish Gigabit connections.

Note If you install an SFP module after the switch has powered on, you must reload the adaptive security

appliance to enable the SFP module.

Table A- 2 lists the SFP modules that are supported by the adaptive security appliance.

Table A-2 Supported SFP Modules

SFP Module Type of Connection Cisco Part Number

1000BASE-LX/LH Fiber-optic GLC-LH-SM=

1000BASE-SX Fiber-optic GLC-SX-MM=

The 1000BASE-LX/LH and 1000BASE-SX SFP modules are used to establish fiber-optic connections. Use fiber-optic cables with LC connectors to connect to an SFP module. The SFP modules support 850 to 1550 nm nominal wavelengths. The cables must not exceed the required cable length for reliable communications. Tabl e A-3 lists the cable length requirements.

Installing and Replacing the 4GE SSM

Table A-3 Cabling Requirements for Fiber-Optic SFP Modules

62.5/125 micron Multimode 850

SFP Module

nm Fiber

LX/LH — — 550 m at

SX 275 m at

200 Mhz-km

50/125 micron Multimode 850 nm Fiber

550 m at 500 Mhz-km

62.5/125 micron Multimode 1310 nm Fiber

500 Mhz-km

50/125 micron Multimode 1310 nm Fiber

550 m at 400 Mhz-km

9/125 micron Single-mode 1310 nm Fiber

10 km

———

Use only Cisco certified SFP modules on the adaptive security appliance. Each SFP module has an internal serial EEPROM that is encoded with security information. This encoding provides a way for Cisco to identify and validate that the SFP module meets the requirements for the adaptive security appliance.

Note Only SFP modules certified by Cisco are supported on the adaptive security appliance.

Caution Protect your SFP modules by inserting clean dust plugs into the SFPs after the cables are extracted from

them. Be sure to clean the optic surfaces of the fiber cables before you plug them back in the optical bores of another SFP module. Avoid getting dust and other contaminants into the optical bores of your SFP modules: The optics do not work correctly when obstructed with dust.

78-16409-03

Warning

Because invisible laser radiation may be emitted from the aperture of the port when no cable is connected, avoid exposure to laser radiation and do not stare into open apertures.

Cisco ASA 5500 Series Hardware Installation Guide

Statement 70

A-5

Installing and Replacing the 4GE SSM

Installing the SFP Module

To install the SFP module in the 4GE SSM, perform the following steps:

Step 1 Line up the SFP module with the port and slide the SFP module into the port slot until it locks into

position as shown in Figure A-4.

Figure A-4 Installing an SFP Module

Appendix A Maintenance and Upgrade Procedures

132985

1 Optical port plug 2 SFP port slot

3 SFP module

Caution Do not remove the optical port plugs from the SFP until you are ready to connect cabling.

Step 2 Remove the Optical port plug; then connect the network cable to the SFP module.

Step 3 Connect the other end of the cable to your network. For more information on connecting the cables, see

“Connecting the Interface Cables” section on page 2-7.

Caution The latching mechanism used on many SFPs locks them into place when cables are connected. Do not

pull on the cabling in an attempt to remove the SFP.

A-6

Cisco ASA 5500 Series Hardware Installation Guide

78-16409-03

Appendix A Maintenance and Upgrade Procedures

Removing the SFP Module

The SFP modules have different types of latching devices used to detach the SFP module from a port. The following are the different types of modules:

• Mylar Tab Module

• Actuator/Button SFP Module

• Bale-Clasp SFP Module

• Plastic Collar Module

To remove the SFP module, perform the following steps:

Step 1 Disconnect all cables from the SFP.

Installing and Replacing the 4GE SSM

Warning

Caution The latching mechanism used on many SFPs locks the SFP into place when cables are connected. Do not

Because invisible laser radiation may be emitted from the aperture of the port when no cable is connected, avoid exposure to laser radiation and do not stare into open apertures.

Statement 70

pull on the cabling in an attempt to remove the SFP.

Step 2 Disconnect the SFP latch as shown in Figure A-5.

Note SFP modules use various latch designs to secure the module in the SFP port. Latch designs are not

linked to SFP model or technology type. For information on the SFP technology type and model, see the label on the side of the SFP.

Figure A-5 Disconnecting SFP Latch Mechanisms

1 2 3 4

78-16409-03

Step 3

117722

1 Mylar tab 2 Actuator/Button

3 Bale-clasp 4 Plastic collar

Grasp the SFP on both sides and remove it from the port.

Cisco ASA 5500 Series Hardware Installation Guide

A-7

Appendix A Maintenance and Upgrade Procedures

Installing and Replacing the ASA SSM 10/20

This section describes how to install and replace the ASA SSM 10/20 in the adaptive security appliance. This section includes the following topics:

• Installing an ASA SSM 10/20, page A-9

• Replacing an ASA SSM 10/20, page A-10

There are two types of the SSM: the ASA SSM 10 and the ASA SSM 20. Both types look identical, but the ASA SSM 20 has a faster processor and more memory than the ASA SSM 10. Only one module (the ASA SSM 10 or the ASA SSM 20) can populate the slot at a time.

For more information on the ASA SSM 10/20, see the “Assigning Traffic to the SSM” section in the

Cisco Security Appliance Command Line Configuration Guide.

Table A-4 lists the memory specifications for the ASA SSM 10 and the ASA SSM 20.

Table A-4 ASA SSM Memory Specifications

SSM CPU DRAM

ASA SSM 10 2.0 GHz Celeron 1.0 GB

ASA SSM 20 2.4 GHz Pentium 4 2.0 GB

Figure A-6 lists the ASA SSM LEDs.

Figure A-6 ASA SSM LEDs

LINK/ACT

SPEED

PWR

1 2

STATUS

3 4

119644

Table A-5 describes the ASA SSM LEDs.

Table A-5 ASA SSM LEDs

LED Color State Description

1 PWR Green On The system has power.

2 STATUS Green Flashing The system is booting.

Solid The system has passed power-up diagnostics.

3 LINK/ACT Green Solid There is an Ethernet link.

Flashing There is Ethernet activity.

4 SPEED Green

Amber

100 MB There is network activity.

1000 MB (GigE) There is network activity.

A-8

Cisco ASA 5500 Series Hardware Installation Guide

78-16409-03

+ 16 hidden pages