Cisco ASA5500-HW - Hardware Accessory Kit Network Device, ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X Hardware Installation Manual

Cisco ASA 5500-X Series Hardware
Installation Guide

for the Cisco ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X Chassis

Americas Headquarters

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]

800 553-NETS (6387)

Fax: [phone]

Text Part Number: N/A

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The following inform ation is for FCC compliance of Class A devices: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant
to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial
environment. This equipment generates, uses, and can radiate radio-frequency energy and, if not installed and used in accordance with the instruction manual, may cause
harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required
to correct the interference at their own expense.

The following information is for FCC compliance of Class B devices: The equipment described in this manual generates and may radiate radio-frequency energy. If it is not
installed in accordance with Cisco’s installation instructions, it may cause interference with radio and television reception. This equipment has been tested and found to
comply with the limits for a Class B digital device in accordance with the specifications in part 15 of the FCC rules. These specifications are designed to provide reasonable
protection against such interference in a residential installation. However, there is no guarantee that interference will not occur in a particular installation.

Modifying the equipment without Cisco’s written authorization may result in the equipment no longer complying with FCC requirements for Class A or Class B digital
devices. In that event, your right to use the equipment may be limited by FCC regulations, and you may be required to correct any interference to radio or television
communications at your own expense.

You can determine whether your equipment is causing interference by turning it off. If the interference stops, it was probably caused by the Cisco equipment or one of its
peripheral devices. If the equipment causes interference to radio or television reception, try to correct the interference by using one or more of the following measures:

• Turn the television or radio antenna until the interference stops.

• Move the equipment to one side or the other of the television or radio.

• Move the equipment farther away from the television or radio.

• Plug the equipment into an outlet that is on a different circuit from the television or radio. (That is, make certain the equipment and the television or radio are on circuits
controlled by different circuit breakers or fuses.)

Modifications to this product not authorized by Cisco Systems, Inc. could void the FCC approval and negate your authority to operate the product.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this
URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)

Cisco ASA 5500-X Series Hardware Installation Guide

©2012 Cisco Systems, Inc. All rights reserved.

Text Part Number:

CONTENTS

About This Guide v

Document Objectives v

Audience v

Document Organization v

Document Conventions vi

Installation Warnings vi

Where to Find Safety and Warning Information x

Obtaining Documentation and Submitting a Service Request 1-x

CHAPTER

CHAPTER

CHAPTER

1 Overview 1-1

Product Overview 1-2

Memory Requirements 1-5

2 Preparing for Installation 2-1

Overview 2-1

Installation Overview 2-1

Safety Recommendations 2-2

Maintaining Safety with Electricity 2-2
Preventing Electrostatic Discharge Damage 2-3

General Site Requirements 2-4

Site Environment 2-4
Preventive Site Configuration 2-4
Power Supply Considerations 2-4
Configuring Equipment Racks 2-6

3 Installing the Adaptive Security Appliance 3-1

Installing the Adaptive Security Appliance 3-1

Rack-Mounting the Chassis 3-2
Setting the Chassis on a Desktop 3-3
Connecting the Interface Cables 3-4

CHAPTER

4 Maintenance and Upgrade Procedures 4-1

Removing and Replacing the Chassis Cover 4-1

Cisco ASA 5500-X Series Hardware Installation Guide

iii

Removing the Chassis Cover 4-1
Replacing the Chassis Cover 4-2

Working in an ESD Environment 4-3

Installing and Removing the SFP Modules 4-15

SFP Module 4-16
Installing the SFP Module 4-17
Removing the SFP Module 4-18

CONTENTS

APPENDIX

I

NDEX

1 Cable Pinouts 1-1

10/100/1000BaseT Connectors 1-1

Console Port (RJ-45) 1-2

RJ-45 to DB-9 1-4

MGMT 10/100/1000 Ethernet Port 1-4

Gigabit and Fibre Channel Ports 1-5

Cisco ASA 5500-X Series Hardware Installation Guide

iv

About This Guide

This preface includes the following sections:

• Document Objectives, page v

• Audience, page v

• Document Organization, page vi

• Document Conventions, page vi

• Installation Warnings, page vii

• Related Documentation, page xi

• Where to Find Safety and Warning Information, page xi

• Obtaining Documentation and Submitting a Service Request, page xi

Document Objectives

This guide describes how to install and maintain the Cisco ASA 5500-X series appliances. Information
in this guide applies to the following Cisco ASA 5500-X Series models: ASA 5512-X, ASA 5515-X,
ASA 5525-X, ASA 5545-X, and ASA 5555-X. References to “Cisco ASA 5500-X Series” and “ASA”
apply to all previously listed models unless specifically noted otherwise.

Audience

This guide is for experienced network security administrators who install, configure, and maintain
Cisco ASAs in their networks.

Cisco ASA 5500-X Series Hardware Installation Guide

v

Document Organization

Chapter Title Description

1“ASA Chassis Overview” Describes the ASA product and its specifications

2“Preparing for Installation” Describes steps to follow before installing ASAs

3“Installing and Connecting the ASA” Describes how to install an ASA in a rack and how

4“Maintenance and Upgrade

Procedures”

Appendix “Identifying Cable Pinouts” Describes the cable pinouts

Document Conventions

About This Guide

to connect interface cables

Describes how to remove and replace the chassis
cover, the power supply, the optional I/O card, and
the SFPs

Command descriptions use these conventions:

• Braces ({ }) indicate a required choice.

• Square brackets ([ ]) indicate optional elements.

• Vertical bars (|) separate alternative, mutually exclusive elements.

• Boldface indicates commands and keywords that are entered literally as shown.

• Italics indicate arguments for which you supply values.

Examples use these conventions:

• Examples depict screen displays and the command line in screen font.

• Information you need to enter in examples is shown in boldface screen font.

• Variables for which you must supply a value are shown in

Graphical user interface examples uses these conventions:

• Boldface indicates buttons and menu items.

• Selecting a menu item (or pane) is indicated by the following convention:

Choose Start > Settings > Control Panel.

Note Means reader take note. Notes contain helpful suggestions or references to material not covered in the

manual.

italic screen

font.

Cisco ASA 5500-X Series Hardware Installation Guide

vi

About This Guide

Installation Warnings

Be sure to read the Regulatory Compliance and Safety Information document at before installing the chassis.
This document contains important safety information. This section includes the following warnings:

• Power Supply Disconnection Warning, page vii

• Jewelry Removal Warning, page vii

• Wrist Strap Warning, page viii

• More than One Power Supply Warning, page viii

• Work During Lightning Activity Warning, page viii

• Installation Instructions Warning, page viii

• Chassis Warning for Rack-Mounting and Servicing, page viii

• SELV Circuit Warning, page viii

• Ground Conductor Warning, page viii

• Blank Faceplates and Cover Panels Warning, page ix

• Product Disposal Warning, page ix

• Short-Circuit Protection Warning, page ix

• Compliance with Local and National Electrical Codes Warning, page ix

• DC Power Connection Warning, page ix

• AC Power Disconnection Warning, page ix

• TN Power Warning, page ix

• 48 VDC Power System, page x

• Multiple Power Cord, page x

• Circuit Breaker (15A) Warning, page x

• Grounded Equipment Warning, page x

• Safety Cover Requirement, page x

• Faceplates and Cover Panel Requirement, page x

Power Supply Disconnection Warning

Warning

Before working on a chassis or working near power supplies, unplug the power cord on AC units;
disconnect the power at the circuit breaker on DC units.

Jewelry Removal Warning

Statement 12

Warning

Before working on equipment that is connected to power lines, remove jewelry (including rings,
necklaces, and watches). Metal objects will heat up when connected to power and ground and can
cause serious burns or weld the metal object to the terminals.

Statement 43

Cisco ASA 5500-X Series Hardware Installation Guide

vii

Wrist Strap Warning

About This Guide

Warning

During this procedure, wear grounding wrist straps to avoid ESD damage to the card. Do not directly
touch the backplane with your hand or any metal tool, or you could shock yourself.

More than One Power Supply Warning

Warning

This unit has more than one power supply connection; all connections must be removed completely
to completely remove power from the unit.

Work During Lightning Activity Warning

Warning

Do not work on the system or connect or disconnect cables during periods of lightning activity.

Statement 1001

Installation Instructions Warning

Warning

Read the installation instructions before connecting the system to the power source.

Chassis Warning for Rack-Mounting and Servicing

Statement 94

Statement 102

Statement 1004

Warning

To prevent bodily injury when mounting or servicing this unit in a rack, you must take special
precautions to ensure that the system remains stable. The following guidelines are provided to ensure
your safety:

this unit in a partially filled rack, load the rack from the bottom to the top with the heaviest component at the bottom
of the rack.If the rack is provided with stabilizing devices, install the stabilizers before mounting or servicing the unit
in the rack.

SELV Circuit Warning

Warning

To avoid electric shock, do not connect safety extra-low voltage (SELV) circuits to telephone-network
voltage (TNV) circuits. LAN ports contain SELV circuits, and WAN ports contain TNV circuits. Some
LAN and WAN ports both use RJ-45 connectors. Use caution when connecting cables.

Ground Conductor Warning

Warning

This equipment must be grounded. Never defeat the ground conductor or operate the equipment in the
absence of a suitably installed ground conductor. Contact the appropriate electrical inspection
authority or an electrician if you are uncertain that suitable grounding is available.

This unit should be mounted at the bottom of the rack if it is the only unit in the rack.When mounting

Statement 1006

Statement 1021

Statement 1024

Cisco ASA 5500-X Series Hardware Installation Guide

viii

About This Guide

Blank Faceplates and Cover Panels Warning

Warning

Blank faceplates and cover panels serve three important functions: they prevent exposure to
hazardous voltages and currents inside the chassis; they contain electromagnetic interference (EMI)
that might disrupt other equipment; and they direct the flow of cooling air through the chassis. Do not
operate the system unless all cards, faceplates, front covers, and rear covers are in place.

1029

Product Disposal Warning

Warning

Ultimate disposal of this product should be handled according to all national laws and regulations.

Statement 1040

Short-Circuit Protection Warning

Warning

This product requires short-circuit (overcurrent) protection, to be provided as part of the building
installation. Install only in accordance with national and local wiring regulations.

Compliance with Local and National Electrical Codes Warning

Warning

Installation of the equipment must comply with local and national electrical codes.

Statement

Statement 1045

Statement 1074

DC Power Connection Warning

Warning

After wiring the DC power supply, remove the tape from the circuit breaker switch handle and
reinstate power by moving the handle of the circuit breaker to the ON position.

AC Power Disconnection Warning

Warning

Before working on a chassis or working near power supplies, unplug the power cord on AC units.

Statement 246

TN Power Warning

Warning

The device is designed to work with TN power systems.

Statement 19

Statement 8

Cisco ASA 5500-X Series Hardware Installation Guide

ix

48 VDC Power System

About This Guide

Warning

The customer 48 volt power system must provide reinforced insulation between the primary AC power
and the 48 VDC output.

Multiple Power Cord

Warning

This unit has more than one power cord. To reduce the risk of electric shock when servicing a unit,
disconnect the power cord of the power strip that the unit is plugged into.

Circuit Breaker (15A) Warning

Warning

This product relies on the building’s installation for short-circuit (overcurrent) protection. Ensure that
a fuse or circuit breaker no larger than 120
phase conductors (all current-carrying conductors).

Grounded Equipment Warning

Warning

This equipment is intended to be grounded. Ensure that the host is connected to earth ground during
normal use.

Statement 128

Statement 137

VAC, 15A U.S. (240 VAC, 10A international) is used on the

Statement 13

Statement 39

Safety Cover Requirement

Warning

The safety cover is an integral part of the product. Do not operate the unit without the safety cover
installed. Operating the unit without the cover in place will invalidate the safety approvals and pose
a risk of fire and electrical hazards.

Faceplates and Cover Panel Requirement

Warning

Blank faceplates and cover panels serve three important functions: they prevent exposure to
hazardous voltages and currents inside the chassis; they contain electromagnetic interference (EMI)
that might disrupt other equipment; and they direct the flow of cooling air through the chassis. Do not
operate the system unless all cards, faceplates, front covers, and rear covers are in place.

142

Statement 117

Statement

Cisco ASA 5500-X Series Hardware Installation Guide

x

About This Guide

Where to Find Safety and Warning Information

For safety and warning information, see the Regulatory Compliance and Safety Information document
at the following URL:

http://www.cisco.com/en/US/docs/security/asa/roadmap/asaroadmap.html#wp57708

This RCSI document describes the international agency compliance and safety information for the
Cisco ASA 5500-X series. It also includes translations of the safety warnings used in this guide.

Related Documentation

For a complete list of the Cisco ASA 5500-X series documentation and where to find it, see the
documentation roadmap at the following URL:

http://www.cisco.com/en/US/docs/security/asa/roadmap/asaroadmap.html

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional
information, see the monthly What’s
revised Cisco

http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html

Subscribe to the What’s New in Cisco Product Documentation as an RSS feed and set content to be
delivered directly to your desktop using a reader application. The RSS feeds are a free service. Cisco currently
supports RSS Version 2.0.

technical documentation, at:

New in Cisco Product Documentation, which also lists all new and

Cisco ASA 5500-X Series Hardware Installation Guide

xi

About This Guide

Cisco ASA 5500-X Series Hardware Installation Guide

xii

CHA PTER

1

ASA Chassis Overview

This chapter describes the Cisco ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X chassis models.
We recommend that you read this entire guide before beginning any of the procedures contained herein.

Warning

Caution Read the safety warnings in the Regulatory Compliance and Safety Information document for the Cisco

Only trained and qualified personnel should install, replace, or service this equipment.

ASA 5500-X, and follow proper safety procedures when performing any tasks in this guide. See

http://www.cisco.com/go/asadocs for links to the RCSI and other ASA documents.

This chapter includes the following topics:

• Cisco ASA 5500-X Series Chassis Overview, page 1-1

• Memory Requirements, page 1-3

• Management 0/0 Interface on the ASA 5500-X Series, page 1-3

Statement 49

• External USB Support, page 1-2

• Alarm LED, page 1-4

• ASA 5500-X I/O Cards, page 1-4

• ASA Chassis Panels, page 1-4

• Hardware Specifications, page 1-11

Cisco ASA 5500-X Series Chassis Overview

This guide supports the Cisco ASA 5500-X series models, which includes the ASA 5512-X,
ASA

5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X.

The Cisco ASA 5500-X series is a family of next-generation mid-range ASAs that are built on the same
security platform as the rest of the ASA family. These next-generation ASAs provide more firewall
throughput (4X firewall throughput), better scaling, more Ethernet ports (up to 14 GE ports), dedicated
IPS acceleration hardware, and redundant power supplies on the 5545-X and 5555-X models. The IPS
is now context-aware, so it can be enabled through software by a virtual machine without requiring
additional hardware, which provides greater deployment flexibility.

For information about ASA 5500-X performance, see the “Hardware Specifications” section on

page 1-11.

Cisco ASA 5500-X Series Hardware Installation Guide

1-1

External USB Support

For information about IPS functionality within ASA, see Cisco Intrusion Prevention System
documentation at the following URL:

http://www.cisco.com/en/US/docs/security/ips/7.1/roadmap/19889_01.html

External USB Support

The Cisco ASA 5500-X series chassis have internal and external USB drives that use FAT32 file system.

Internal USB Drives

Embedded USB (eUSB) devices are used as the internal flash (disk0).

External USB Drives

The ASA 5500-X series is the first ASA hardware platform to support external USB flash drives for data
storage. Previous ASA platforms allowed an external compact flash that supported Online Insertion and
Removal (OIR), where disk1: became the unique identifier. The ASA 5500-X series follows this model,
using disk1: as the external USB flash drive identifier. When the ASA is powered on, an inserted USB
flash drive is mounted to disk1: and available for you to use. Additionally, the file system commands that
are available to disk0: are also available to disk1, including copy, format, delete, mkdir, pwd, cd, and
so on. When you remove the USB flash drive, the system unmounts disk1:, and disk1: becomes an invalid
file system label that you can no longer access.

Chapter 1 ASA Chassis Overview

Because the disk allowance is restricted to 2 disks (labeled as disk0 and disk1), and disk0 is occupied by
the internal eUSB on the ASA, disk1 is the disk label for the external USB drive. In this way, the system
mounts only one partition. For example, if you insert a USB drive with more than one partition, only the
first partition is mounted.

OIR Support

While the ASA back panel has two USB slots, only one is supported for OIR, with priority given to the
USB drive that was inserted first. For example, based upon the time sequence, the first inserted USB
flash drive is mounted to disk1, regardless of the slot in which you insert it. When you insert a second
USB device, an error message displays on the console to notify you that an extra, unsupported USB flash
drive exists. Removing either one of the USB devices does not change the priority that you just
established. To change the priority you must safely remove the USB device and begin again to establish
the desired priority.

FAT File System

The ASA 5500-X series supports only FAT32 formatted file systems for the eUSB and external USB
drives. It is important that the first partition of the inserted USB drive is in the FAT format. If it is not,
the system mounting process fails, and you receive an error message. You can enter the format disk1:
command to format the partition to FAT 32 and mount the partition to disk1 again: however, data might
be lost.

Cisco ASA 5500-X Series Hardware Installation Guide

1-2

Chapter 1 ASA Chassis Overview

Memory Requirements

The memory listed in Tabl e 1-1 is the default value that ships with each ASA.

Ta b l e 1-1 Memory Requirements for the ASA 5500-X Models

ASA Model Default DRAM Memory (GB)

Cisco ASA 5512-X 4

Cisco ASA 5515-X 8

Cisco ASA 5525-X 8

Cisco ASA 5545-X 12

Cisco ASA 5555-X 16

Check the amount of free memory on the ASA by doing the following:

• ASDM—Choose Tools > File Management. The amount of available memory appears on the

bottom left in the pane.

• CLI—In Privileged EXEC mode, enter the dir command. The amounts of available memory appears

at the bottom of the output.

Memory Requirements

In a failover configuration, the two units must have the same hardware configuration. They must be the
same model, have the same number and types of interfaces, and have the same amount of RAM.

Management 0/0 Interface on the ASA 5500-X Series

You manage the ASA through the Management 0/0 interface on the ASA 5512-X through ASA 5555-X
models. The Management 0/0 interface has the following characteristics:

• No through traffic support

• No subinterface support

• No priority queue support

• No multicast MAC support

• The IPS SSP software module and the ASA share the Management 0/0 interface; however, each has

its own separate MAC addresses and IP addresses. You must configure the IPS IP address within the
IPS operating system. However, you configure physical characteristics (such as enabling the
interface) on the ASA.

By default, the Management 0/0 interface is configured for management-only traffic, and you cannot
disable management-only for the Management interface. Also, the ASA 5500-X models do not allow
subinterfaces on the Management interface, so for per-context management, you must connect to a data
interface.

The Management 0/0 interface is configured for ASDM access as part of the default factory
configuration.

For more information, see the “Rear Panel Ports” section on page 1-9.

Cisco ASA 5500-X Series Hardware Installation Guide

1-3

Alarm LED

Alarm LED

The ASA 5500-X series chassis perform autonomous environment monitoring to poll all external sensors
and monitor operating conditions. In the event of damage to certain internal components or surpassed
temperature thresholds, the system activates an alarm LED to notify you of a critical condition. For
example, the alarm LED is activated by firmware in the event of various critical over-voltage and
over-temperature conditions, as well as when the ASA has missing or unrecognized internal chip
components. When the alarm LED lights, you can find details about the system condition from the
system message that appears on the console or by entering the show environment or show controller
pci command.

ASA 5500-X I/O Cards

The Cisco ASA 5500-X Series 6-port Gigabit Ethernet interface cards extend the I/O capabilities of the
ASA

5525-X, ASA 5545-X, and ASA 5555-X models by providing additional Gigabit Ethernet ports.

The I/O cards provide the following benefits:

• Segmentation of network traffic into separate security zones

Chapter 1 ASA Chassis Overview

• Fiber optic cable connectivity for communicating over long distances

• Load sharing of traffic and protection against link failure by using EtherChannel

• Support for Jumbo Ethernet frames of up to 9000 bytes

• Protection for Active/Active failover and of full-mesh firewall deployments against cable failure

For information about installing an I/O card in your ASA, see Chapter 4, “Maintenance and Upgrade

Procedures.”

ASA Chassis Panels

This section describes the front and rear ASA panels, and it includes the following topics:

• Front Panel LEDs, page 1-5

• Rear Panel LEDs, page 1-8

• Rear Panel Ports, page 1-9

Cisco ASA 5500-X Series Hardware Installation Guide

1-4

Chapter 1 ASA Chassis Overview

Cisco ASA 5515

Adapative Security Appliance

BOOT

ACTIVE

PS

ALARM

VPN

HD

Cisco ASA 5515

Adapative Security Appliance

BOOT

ACTIVE

PS

ALARM

VPN

HD

1

2

5

8

7

6

3

4

Front Panel LEDs

This section describes the front panel LEDs for the Cisco ASA 5500-X series chassis.

Figure 1-1 shows the front panel LEDs for the ASA 5512-X, ASA 5515-X, and ASA 5525-X models.

Figure 1-1 Front Panel LEDs for the Cisco ASA 5512-X, ASA 5515-X, and ASA 5525-X

ASA Chassis Panels

LED Description

1 Power button A hard switch that turns the system on and off. Once depressed, the

button stays in the “on” position:

• On—The power symbol on the button illuminates.

• Off—The power symbol on the button is dark.

For information about the power state, see the “Power Supply

Considerations” section on page 2-5.

2 Hard disk release button Releases the hard disk from the device.

3 Alarm Indicates system operating status:

• Off—Normal operating system function.

• Flashing amber—Critical Alarm indicating one or more of the

following:

–

a major failure of a hardware or software component.

–

an over-temperature condition.

–

power voltage is outside of the tolerance range.

4 VPN Indicates VPN tunnel status:

• Solid green—VPN tunnel is established.

• Off—No VPN tunnel is established.

Cisco ASA 5500-X Series Hardware Installation Guide

1-5

ASA Chassis Panels

Cisco ASA 5545

Adapative Security Appliance

BOOT
ACTIVE
PS1
PS0

ALARM
VPN
HD1
HD0

1

0

Cisco ASA 5545

Adapative Security Appliance

BOOT
ACTIVE
PS1
PS0

ALARM
VPN
HD1
HD0

1

0

1

3

4

9

2

13

12

11

10

5

6

7

8

Chapter 1 ASA Chassis Overview

5 HD Indicates Hard Disk Drive status:

• Flashing green—Proportioned to read/write activity.

• Solid amber—Hard disk drive failure.

• Off—No hard disk drive present.

6 PS Indicates the power supply status

7 Active Indicates the status of the failover pair:

• Solid green—Failover pair is operating normally.

• Off—Failover is not operational.

8 Boot Indicates power-up diagnostics:

• Flashing green—Power-up diagnostics are running, or system

is booting.

• Solid green—System has passed power-up diagnostics.

• Off—Power-up diagnostics are not operational.

Figure 1-2 shows the front panel LEDs for the ASA 5545-X and ASA 5555-X models.

Figure 1-2 Front Panel LEDs for Cisco ASA 5545-X and ASA 5555-X

LED Description

Power button A hard switch that turns the system on and off. Once depressed, the

1

Cisco ASA 5500-X Series Hardware Installation Guide

1-6

button stays in the “on” position:

• On—The power symbol on the button illuminates.

• Off—The power symbol on the button is dark.

For information about the power state, see the “Power Supply

Considerations” section on page 2-5.

Chapter 1 ASA Chassis Overview

2 Hard disk slot Indicates the slot for hard disk 1.

3 Hard disk release button Releases hard disk 1 from the device.

4 Hard disk release button Releases hard disk 0 from the device.

5 Hard disk slot Indicates the slot for hard disk 0.

6 Alarm Indicates system operating status:

7 VPN Indicates VPN tunnel status:

8 HD1 Indicates Hard Disk Drive 1 status:

ASA Chassis Panels

• Off—Normal operating system function

• Flashing amber—Critical Alarm indicating one or more of the

following:

–

a major failure of a hardware or software component.

–

an over-temperature condition.

–

power voltage is outside of the tolerance range.

• Solid green—VPN tunnel is established.

• Off—No VPN tunnel is established.

• Flashing green—Proportioned to read/write activity.

• Solid amber—Hard disk drive failure.

• Off—No hard disk drive present.

9 HD0 Indicates Hard Disk Drive 0 status:

• Flashing green—Proportioned to read/write activity.

• Solid amber—Hard disk drive failure.

• Off—No hard disk drive present.

10 PS1 Indicates the status of the optional redundant power supply.

11 PS0 Indicates the status of the primary power supply that ships with the

product.

12 Active Indicates the status of the failover pair:

• Solid green—Failover pair is operating normally.

• Off—Failover pair is not operational.

13 Boot Indicates power-up diagnostics:

• Flashing green—Power-up diagnostics are running, or system

is booting.

• Solid green—System has passed power-up diagnostics.

• Off—Power-up diagnostics are not operational.

Cisco ASA 5500-X Series Hardware Installation Guide

1-7

ASA Chassis Panels

Rear Panel LEDs

Figure 1-3 shows the rear panel LEDs for the ASA 5500-X series chassis.

Figure 1-3 Rear Panel LEDs for ASA 5500-X Series Chassis

Chapter 1 ASA Chassis Overview

1 753

2 64

332118

LED Description

1 Power Indicates power supply status:

• Off—Power supply off.

• Solid green—Power supply on.

2 Alarm Indicates system operating status:

• Off—Normal operating system function

• Flashing amber—Critical Alarm indicating one or more of the

following:

–

a major failure of a hardware or software component.

–

an over-temperature condition.

–

power voltage is outside of the tolerance range.

3 Boot Indicates power-up diagnostics:

• Flashing green—Power-up diagnostics are running, or system

is booting.

• Solid green—System has passed power-up diagnostics.

• Off—Power-up diagnostics are not operational.

4 Active Indicates the status of the failover pair:

5 VPN Indicates VPN tunnel status:

Cisco ASA 5500-X Series Hardware Installation Guide

1-8

• Solid green—Failover pair is operating normally.

• Off—Failover pair is not operational.

• Solid green—VPN tunnel is established.

• Off—No VPN tunnel is established.

Chapter 1 ASA Chassis Overview

282361

1

245

3

6 HD0 Indicates Hard Disk Drive 0 status:

7 HD1 Indicates Hard Disk Drive 1 status:

Rear Panel Ports

This section describes the rear panel ports on the Cisco ASA 5500-X series chassis.

Figure 1-4 shows the ports for the ASA 5512-X, ASA 5515-X, and ASA 5525-X models.

ASA Chassis Panels

LED Description

• Flashing green—Proportioned to read/write activity.

• Solid amber—Hard disk drive failure.

• Off—No hard disk drive present.

• Flashing green—Proportioned to read/write activity.

• Solid amber—Hard disk drive failure.

• Off—No hard disk drive present.

Figure 1-4 Rear Panel Ports for the ASA 5512-X, ASA 5515-X, and ASA 5525-X

.

LED Description

1 Management 0/0 interface Indicates the Gigabit Ethernet interface that is restricted to

management use only. Connect with an RJ-45 cable.

(See the “Management 0/0 Interface on the ASA 5500-X Series”

section on page 1-3.)

2 Power supply Indicates the status of the power supply.

3 RJ-45 ports Indicates the Gigabit Ethernet customer data interfaces.

The top row port numbers are (from left to right) 5, 3, 1.
The bottom row port numbers are (from left to right) 4, 2, 0.

4 USB Ports Indicates the two USB standard ports.

5 Console port Indicates the console port that directly connects a computer to the

(See the “External USB Support” section on page 1-2.)

ASA.

Cisco ASA 5500-X Series Hardware Installation Guide

1-9

ASA Chassis Panels

Chapter 1 ASA Chassis Overview

Figure 1-5 shows the rear panel ports for the ASA 5545-X and ASA 5555-X.

Figure 1-5 Rear Panel Ports for the ASA 5545-X and ASA 5555-X

21 3

4 5

67

LED Description

1 I/O slot Slot for the optional I/O Card. If you have a fiber I/O card, use SFP

modules to connect (not included).

(See the “Gigabit and Fibre Channel Ports” section on page 5-4.)

2 Thumbscrew The screw that tightens and loosens the chassis cover.

3 Management 0/0 port Indicates the Gigabit Ethernet interface that is restricted to

management use only. Connect with an RJ-45 cable.

(See the “Management 0/0 Interface on the ASA 5500-X Series”

section on page 1-3.)

4 RJ-45 ports Indicates the Gigabit Ethernet customer data interfaces.

The top row port numbers are (from left to right) 7, 5, 3, 1.
The bottom row port numbers are (from left to right) 6, 4, 2, 0.

5 Power supplies Slots for the primary power supply that ships with the device and the

optional redundant power supply.

6 USB ports Indicates the two USB standard ports.

282362

1-10

(See the “External USB Support” section on page 1-2.)

7 Console port Indicates the console port that directly connects a computer to the

ASA.

Cisco ASA 5500-X Series Hardware Installation Guide

Chapter 1 ASA Chassis Overview

Hardware Specifications

Hardware Specifications

Table 1-2 contains hardware specifications for the ASA 5500-X series models.

Ta b l e 1-2 Hardware Specifications for the Cisco ASA 5500-X series

ASA 5512-X ASA 5515-X ASA 5525-X ASA 5545-X ASA 5555-X

Physical Specifications

Form-factor 1RU, 19-in 1RU, 19-in 1RU, 19-in 1RU, 19-in 1RU, 19-in

Rack mountable Yes .

Brackets included,
slide rails optional

Dimensions 1.67x1.67x1.56 in.

42.4x429x395 mm

Weight—single
power supply

Weight—dual
power supply

Technical Specifications

Memory 4 GB 8 GB 8 GB 12 GB 16 GB

Minimum System
Flash

Power Supply Information

Power supply 400 W 400W 400W 450W 450W

Redundant power
supply available

Operating Conditions

Temperature -5°C to 40°C

Relative humidity 90% 90% 90% 90% 90%

Altitude 10,000 ft. 10,000 ft. 10,000 ft. 10,000 ft. 10,000 ft.

Non-Operating Conditions

Temperature -25°C to 70°C

Relative humidity 10% to 90% 10% to 90% 10% to 90% 10% to 90% 10% to 90%

Altitude 15,000 ft. 15,000 ft. 15,000 ft. 15,000 ft. 15,000 ft.

13.39 lb. 13.39 lb. 14.92 lb. 16.82 lb. 16.82 lb.

N/A N/A N/A 18.86 lb. 18.86 lb.

No No No Ye s Ye s

(23°F to 104°F)

(-13°F to 158°F)

Yes .
Brackets included,
slide rails optional

1.67x1.67x1.56 in.

42.4x429x395 mm

-5°C to 40°C
(23°F to 104°F)

-25°C to 70°C
(-13°F to 158°F)

Ye s.
Brackets included,
slide rails optional

1.67x1.67x1.56 in.

42.4x429x395 mm

8 GB 8 GB 8 GB

-5°C to 40°C
(23°F to 104°F)

-25°C to 70°C
(-13°F to 158°F)

Ye s.
Slide rails
included.

1.67x1.67x1.91 in.

42.4x429x484 mm

-5°C to 40°C
(23°F to 104°F)

-25°C to 70°C
(-13°F to 158°F)

Ye s.
Slide rails
included.

1.67x1.67x1.91 in.

42.4x429x484 mm

-5°C to 40°C
(23°F to 104°F)

-25°C to 70°C
(-13°F to 158°F)

For additional specifications on the ASA 5512-X and ASA 5515-X models, see the product data sheet
at the following URL:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/data_sheet_c78-701253.
html

Cisco ASA 5500-X Series Hardware Installation Guide

1-11

Hardware Specifications

Chapter 1 ASA Chassis Overview

For additional specifications on the ASA 5525-X ASA 5545-X and ASA 5555-X models, see the product
data sheet at the following URL:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/data_sheet_c78-701808.
html

Cisco ASA 5500-X Series Hardware Installation Guide

1-12

Preparing for Installation

The information in this guide applies to the following Cisco ASA 5500-X series models: ASA 5512-X,
5515-X, 5525-X, 5545-X, and 5555-X.

In this guide, references to “Cisco ASA 5500-X series ” and “ASA” apply to all models unless specifically
noted otherwise.

This chapter describes the steps to follow before installing new hardware or performing hardware
upgrades, and it includes the following sections:

• Installation Overview, page 2-1

• Safety Recommendations, page 2-2

• General Site Requirements, page 2-4

Installation Overview

CHA PTER

2

To prepare for the installation of the chassis, perform the following steps:

Step 1 Review the safety precautions outlined in the Regulatory Compliance and Safety Information document

for the ASA 500-X. See http://www.cisco.com/go/asadocs for links to the RCSI and other ASA
documents.

Step 2 Read the ASA release notes for your software version.

Step 3 Unpack the chassis. An accessory kit ships with the chassis and includes the following items:

• ASA 5512-X, ASA 5515-X, and ASA 5525-X chassis—documentation and a product software CD,

a power cord, a yellow Ethernet cable, 10-32 Phillips screws (4), 12-24 Phillips screws (4), a blue
console cable PC terminal adapter, a power cord retainer, rack mount brackets, a grounding wrist
strap

• ASA 5545-X and ASA 5555-X chassis—documentation and a product software CD, a power cord,

a blue console cable PC terminal adapter, a power cord retainer, a slide rail mounting kit, a
grounding wrist strap

Step 4 Place the chassis on a stable work surface.

Step 5 Follow the directions for mounting the chassis in a rack in the “Rack Mounting the Chassis” section on

page 3-1.

Cisco ASA 5500-X Series Hardware Installation Guide

2-1

Safety Recommendations

Step 6 Follow the directions for establishing network connectivity in the “Connecting the Interface Cables and

Verifying Connectivity” section on page 3-2.

Safety Recommendations

Use the following guidelines and the information in the following sections to help ensure your safety and
protect the ASA. The list of guidelines may not address all potentially hazardous situations in your
working environment, so be alert and exercise good judgement at all times.

Note If you need to remove the chassis cover to install a hardware component, such as additional memory or

an interface card, doing so does not affect your Cisco warranty. Upgrading the ASA does not require any
special tools and does not create any radio frequency leaks.

Observe the following safety guidelines:

• Keep the chassis area clear and dust-free before, during, and after installation.

Chapter 2 Preparing for Installation

• Keep tools away from walk areas in which you and others might fall over them.

• Do not wear loose clothing or jewelry, such as earrings, bracelets, or chains that could get caught in

the chassis.

• Wear safety glasses if you are working under any conditions that might be hazardous to your eyes.

• Do not perform any action that creates a potential hazard to people or makes the equipment unsafe.

• Never attempt to lift an object that is too heavy for one person to handle.

This section includes the following topics:

• Maintaining Safety with Electricity, page 2-2

• Preventing Electrostatic Discharge Damage, page 2-3

• Working in an ESD Environment, page 2-3

Maintaining Safety with Electricity

Warning

Before working on a chassis or working near power supplies, unplug the power cord on AC units;
disconnect the power at the circuit breaker on DC units.

Follow these guidelines when working on equipment powered by electricity:

• Before beginning procedures that require access to the interior of the chassis, locate the emergency

power-off switch for the room in which you are working. Then, if an electrical accident occurs, you
can act quickly to turn off the power.

• Do not work alone if potentially hazardous conditions exist anywhere in your work space.

Statement 12

• Never assume that power is disconnected from a circuit; always check the circuit.

• Look carefully for possible hazards in your work area, such as moist floors, ungrounded power

extension cables, frayed power cords, and missing safety grounds.

• If an electrical accident occurs, proceed as follows:

Cisco ASA 5500-X Series Hardware Installation Guide

2-2

Chapter 2 Preparing for Installation

–

–

–

–

• Use the ASA chassis within its marked electrical ratings and product usage instructions.

• Install the ASA in compliance with local and national electrical codes as listed in the REgulatory

Compliance and Safety Information document.

• The ASA models equipped with AC-input power supplies are shipped with a 3-wire electrical cord

with a grounding-type plug that fits only a grounding-type power outlet. Do not circumvent this
safety feature. Equipment grounding should comply with local and national electrical codes.

• The ASA 5500-X models equipped with AC-input power supplies and are shipped with a 3-wire

electrical cord with a grounding-type plug that fits into a grounding-type power outlet only. Do not
circumvent this safety feature. Equipment grounding should comply with local and national
electrical codes.

Safety Recommendations

Use caution; do not become a victim yourself.

Disconnect power from the system.

If possible, send another person to get medical aid. Otherwise, assess the condition of the
victim, and then call for help.

Determine whether or not the person needs rescue breathing or external cardiac compressions;
then take appropriate action.

Preventing Electrostatic Discharge Damage

Electrostatic discharge (ESD) can damage equipment and impair electrical circuitry. ESD damage occurs
when electronic components are improperly handled and can result in complete or intermittent failures.

• Always follow ESD-prevention procedures when removing and replacing components. Ensure that

the chassis is electrically connected to an earth ground. Wear an ESD-preventive wrist strap,
ensuring that it makes good skin contact. Connect the grounding clip to an unpainted surface of the
chassis frame to safely ground ESD voltages. To properly guard against ESD damage and shocks,
the wrist strap and cord must operate effectively. If no wrist strap is available, ground yourself by
touching the metal part of the chassis.

• For safety, periodically check the resistance value of the antistatic strap, which should be between

1 and 10 megohms (Mohms).

Working in an ESD Environment

• Electrostatic discharge (ESD) can damage equipment and impair electrical circuitry. ESD damage

occurs when electronic components are improperly handled and can result in complete or
intermittent failures. Always follow ESD-prevention procedures when you remove and replace
components. Ensure that the chassis is electrically connected to earth ground. Wear an
ESD-preventive wrist strap, ensuring that it makes good skin contact. Connect the grounding clip to
an unpainted surface of the chassis frame to safely ground unwanted ESD voltages. To guard against
ESD damage and shocks, the wrist strap and cord must operate properly. If no wrist strap is
available, ground yourself by touching the metal part of the chassis.

Cisco ASA 5500-X Series Hardware Installation Guide

2-3

General Site Requirements

General Site Requirements

The topics in this section describe the requirements your site must meet for safe installation and
operation of your system. Ensure that your site is properly prepared before beginning installation.

This section includes the following topics:

• Site Environment, page 2-4

• Preventive Site Configuration, page 2-4

• Power Supply Considerations, page 2-5

• Configuring Equipment Racks, page 2-7

Site Environment

Place the chassis on a desktop or mount it on a rack. The location of the chassis and the layout of the
equipment rack or wiring room are extremely important for proper system operation. Placing equipment
too close together with inadequate ventilation and inaccessible panels can cause system malfunctions
and shutdowns. Improper placement can also make it difficult for you to access the chassis for
maintenance.

Chapter 2 Preparing for Installation

For information about physical specifications, see the “Hardware Specifications” section on page 1-11.

When planning the site layout and equipment locations, keep in mind the precautions described in the
next section “Preventive Site Configuration, page 2-4,” to help avoid equipment failures and reduce the
possibility of environmentally caused shutdowns. If you are currently experiencing shutdowns or
unusually high error rates with your existing equipment, these precautions may help you isolate the
cause of failures and prevent future problems.

Preventive Site Configuration

The following precautions will help plan an acceptable operating environment for the chassis and avoid
environmentally caused equipment failures:

• Electrical equipment generates heat. Ambient air temperature might not be adequate to cool

equipment to acceptable operating temperatures without adequate circulation. Ensure that the room
in which you operate your system has adequate air circulation.

• Always follow the ESD-prevention procedures described previously to avoid damage to equipment.

Damage from static discharge can cause immediate or intermittent equipment failure.

• Ensure that the chassis cover is secure. The chassis is designed to allow cooling air to flow

effectively within it. An open chassis allows air leaks, which may interrupt and redirect the flow of
cooling air from the internal components.

Cisco ASA 5500-X Series Hardware Installation Guide

2-4

Chapter 2 Preparing for Installation

120356

120357

Power Supply Considerations

The Cisco ASA 5500-X series hardware operates on AC power and supports the ability to restore the
previous power state of the system in the event that AC power is lost. Be aware of the following when
interacting with system hardware:

• The ASA requires 50 seconds from the time that AC power is applied before the power state can be

updated and stored. This means that any changes to the power state within the first 50 seconds of
applying AC power will not be observed if AC power is removed within that time.

• The ASA requires 10 seconds from the time it is placed into standby mode before the power state

can be updated and stored. This means any changes to the power state within the first 10 seconds of
entering standby mode (including the standby mode itself) will not be observed if AC power is
removed within that time.

Observe the following considerations:

• Check the power at the site before installing the chassis to ensure that the power is “clean” (free of

spikes and noise). Install a power conditioner, if necessary, to ensure proper voltages and power
levels in the source voltage.

• Install proper grounding for the site to avoid damage from lightning and power surges.

• The ASA chassis does not have a user-selectable operating range. Refer to the label on the chassis

for the correct AC-input power requirement.

General Site Requirements

• Several styles of AC-input power supply cords are available; make sure that you have the correct

style for your site.

• Install an uninterruptible power source for your site, if possible.

You also need to provide power to the switch with the appropriate AC power cord for your location.

Table 2 -1 lists the power cords that are used with the AC power supply.

Table 2-1 AC-Input Power Cord Options

Locale Part Number Length Plug Rating Plug Type

Appliance Coupler

300 W AC Power Supply

North America CAB-AC (72-0259) 8.2 ft (2.5 m) 125 VAC, 10 A

Australia, CAB-ACA

8.2 ft (2.5 m) 250 VAC, 10 A

(72-0746-01)

Europe (except
Italy)

CAB-ACE (72-0460) 8.2 ft (2.5 m) 250 VAC, 10 A

Cisco ASA 5500-X Series Hardware Installation Guide

2-5

General Site Requirements

120358

120359

120356

251247

251248

331706

Table 2-1 AC-Input Power Cord Options (continued)

Locale Part Number Length Plug Rating Plug Type

Italy CAB-ACI 72-0556 8.2 ft (2.5 m) 250 VAC, 10 A

Chapter 2 Preparing for Installation

Singapore

CAB-ACU 72-0557 8.2 ft (2.5 m) 250 VAC, 10 A

United
Kingdom

Argentina CAB-ACR

(37-0995-01)

Switzerland CAB-ACS

(72-1483-01)

Japan CAB-JPN

(72-1925-01)

8.2 ft (2.5 m) 250 VAC, 10 A

8.2 ft (2.5 m) 250 VAC, 10 A

8.2 ft (2.5 m) 250 VAC, 10 A

2-6

India CAB-IND-10A

(37-0863-01)

South Africa AIR-PWR-CORD-S

A

(37-0346-01)

Cisco ASA 5500-X Series Hardware Installation Guide

8.2 ft (2.5 m) 250 VAC, 10 A

8.2 ft (2.5 m) 250 VAC, 10 A

Chapter 2 Preparing for Installation

Configuring Equipment Racks

The following tips help you plan an acceptable equipment rack configuration:

• Enclosed racks must have adequate ventilation. Ensure that the rack is not overly congested because

each chassis generates heat. An enclosed rack should have louvered sides and a fan to provide
cooling air.

• When mounting a chassis in an open rack, ensure that the rack frame does not block the intake or

exhaust ports. If the chassis is installed on slides, check the position of the chassis when it is seated
all the way into the rack.

• In an enclosed rack with a ventilation fan in the top, excessive heat generated by equipment near the

bottom of the rack can be drawn upward and into the intake ports of the equipment above it in the
rack. Ensure that you provide adequate ventilation for equipment at the bottom of the rack.

• Baffles can help to isolate exhaust air from intake air, which also helps to draw cooling air through

the chassis. The best placement of the baffles depends on the airflow patterns in the rack.
Experiment with different arrangements to position the baffles effectively.

General Site Requirements

Cisco ASA 5500-X Series Hardware Installation Guide

2-7

General Site Requirements

Chapter 2 Preparing for Installation

Cisco ASA 5500-X Series Hardware Installation Guide

2-8

Installing and Connecting the ASA

This chapter describes how to rack-mount the ASA and connect the interface cables, and it includes the
following sections:

• Rack Mounting the Chassis, page 3-1

• Connecting the Interface Cables and Verifying Connectivity, page 3-2

Rack Mounting the Chassis

Warning

To prevent bodily injury when mounting or servicing this unit in a rack, you must take special
precautions to ensure that the system remains stable. The following guidelines are provided to ensure
your safety:

this unit in a partially filled rack, load the rack from the bottom to the top with the heaviest component at the bottom
of the rack.If the rack is provided with stabilizing devices, install the stabilizers before mounting or servicing the unit
in the rack.

This unit should be mounted at the bottom of the rack if it is the only unit in the rack.When mounting

Statement 1006

CHA PTER

3

The following information can help plan equipment rack installation:

• Allow clearance around the rack for maintenance.

• If the rack contains stabilizing devices, install the stabilizers prior to mounting or servicing the unit

in the rack.

• When mounting a device in an enclosed rack, ensure adequate ventilation. Do not overcrowd an

enclosed rack.

• When mounting a device in an open rack, make sure that the rack frame does not block the intake

or exhaust ports.

• If the rack contains only one unit, mount the unit at the bottom of the rack.

• If the rack is partially filled, load the rack from the bottom to the top, with the heaviest component

at the bottom of the rack.

Note Use the rack mount brackets to mount the Cisco ASA 5512, ASA 5515, and ASA 5525 to a rack. Use

the slide rail mounting system to mount the Cisco ASA 5545 and ASA 5555 to a rack.

Make sure that the rack is not congested, because each unit generates heat.

Cisco ASA 5500-X Series Hardware Installation Guide

3-1

Chapter 3 Installing and Connecting the ASA

Connecting the Interface Cables and Verifying Connectivity

This section contains the following topics:

• Rack Mounting the ASA 5512-X, 5515-X, and 5525-X with Rack Mount Brackets, page 3-2

• Rack Mounting an ASA 5500-X Chassis with Slide Rail Mounting System, page 3-2

Rack Mounting the ASA 5512-X, 5515-X, and 5525-X with Rack Mount Brackets

The ASA 5512-X, 5515-X, and 5525-X chassis ship with rack mount brackets. Use these brackets to
mount the chassis to the front of the rack.

To rack-mount the chassis, with the rack mount brackets, perform the following steps:

Step 1 Attach the rack-mount brackets to the chassis using the supplied screws. Attach the brackets to the holes

in the chassis. After the brackets are secured to the chassis, you can rack-mount it.

Step 2 Attach the chassis to the rack using the supplied screws.

Step 3 To remove the chassis from the rack, remove the screws that attach the chassis to the rack, and then

remove the chassis.

Rack Mounting an ASA 5500-X Chassis with Slide Rail Mounting System

The slide rail mounting system provides a quick, convenient, and secure method for rack mounting the
chassis. While the 5545-X and 5555-X chassis ship with the slide rail mounting system and can be
mounted using this system only, you can use the slide rail mounting system for any of the other ASA
5500-X series chassis, as well. For instructions about using the slide rail mounting system, see the Slide

Rail Installation Instructions for Cisco IronPort C170, M170, and S170 Appliances and Cisco 5512-X,
5515-X, 5525-X, 5545-X, 5555-X Adaptive Security Appliances and Cisco IPS 4345 and 4360 at the

following location:

http://www.cisco.com/en/US/docs/security/asa/roadmap/asaroadmap.html#wp57708

Connecting the Interface Cables and Verifying Connectivity

This section describes how to connect the cables to the Console, Auxiliary, and Management ports.

Note You can use any unused Ethernet interface on the ASA as the failover link. The failover link interface is

not configured as a normal networking interface; it should only be used for the failover link. You can
connect the LAN-based failover link by using a dedicated switch with no hosts or routers on the link or
by using a crossover Ethernet cable to link the units directly. For more information, see the Command
Reference document for your ASA software version at http://www.cisco.com/go/asadocs.

Warning

Cisco ASA 5500-X Series Hardware Installation Guide

3-2

Only trained and qualified personnel should install, replace, or service this equipment. Statement 49

Chapter 3 Installing and Connecting the ASA

Caution Be sure to read the safety warnings in the Regulatory Compliance and Safety Information document for

the ASA 5500-X and follow proper safety procedures when performing all tasks in this guide. See the
RCSI at http://www.cisco.com/en/US/docs/security/asa/roadmap/asaroadmap.html#wp57708.

To connect cables to the ports, perform the following steps:

Step 1 Place the chassis on a flat, stable surface, or in a rack (if you are rack-mounting it.)

Step 2 Before connecting a computer or terminal to the ports, determine the baud rate of the serial port. The baud

rate must match the default baud rate (9600 baud) of the Console port of the ASA. Set up the terminal as
follows: 9600 baud (default), 8 data bits, no parity, 1 stop bits, and Flow Control (FC) = Hardware.

Step 3 Connect the cables to the ports.

a. Management port—for use with the Adaptive Security Device Manager (ASDM)

The ASA has a dedicated management interface referred to as the Management0/0 port. The
Management0/0 port is a Fast Ethernet interface with a dedicated port used only for traffic management.
(See Figure 1-4 on page 1-9 for an illustration of the port in the ASA 5512-X, 5515-X, and 5525-X. See

Figure 1-5 on page 1-10 for an illustration of the port in the ASA 5545-X and 5555-X.)

Connecting the Interface Cables and Verifying Connectivity

Note You can configure any interface to be a management-only interface using the management-only

command. You can also disable management-only mode on the management interface. For more
information about this command, see the management-only command in the Cisco ASA
Command Reference for your software version at http://www.cisco.com/go/asadocs.

–

Connect one RJ-45 connector to the Management0/0 port.

–

Connect the other end of the Ethernet cable to the management port on your computer, and make
sure that your computer is configured to obtain an IP address using DHCP.

b. Console port—for use with the CLI

–

Connect the serial console cable. The console cable has a DB-9 connector on one end for the
serial port on your computer, and the other end is an RJ-45 connector.

–

Connect the RJ-45 connector to the Console port on the ASA.

–

Connect the other end of the cable, the DB-9 connector, to the console port on your computer.

c. Ethernet ports—direct connection

–

Connect the RJ-45 connector to the Ethernet port.

–

Connect the other end of the Ethernet cable to your network device, such as a router, switch, or
hub.

Step 4 Connect the power cord to the ASA, and connect the other end to your power source.

Step 5 Power on the chassis.

Step 6 Check the Power LED on the front of the ASA chassis. When it is solid green, the ASA is powered on.

Step 7 Check the Status LED on the front of the ASA chassis. When it is solid green, the ASA has passed

power-on diagnostics.

For information about using ASDM or the CLI to configure your ASA, see the online documents at

http://www.cisco.com/go/asadocs.

Cisco ASA 5500-X Series Hardware Installation Guide

3-3

Connecting the Interface Cables and Verifying Connectivity

Chapter 3 Installing and Connecting the ASA

Cisco ASA 5500-X Series Hardware Installation Guide

3-4

CHA PTER

Maintenance and Upgrade Procedures

This chapter includes the following sections:

• Removing and Replacing the Chassis Cover, page 4-1

• Installing an I/O Card in the Cisco ASA 5512-X, 5515-X, and 5525-X Chassis, page 4-3

• Installing an I/O Card in the Cisco ASA 5545-X and 5555-X Chassis, page 4-7

• Removing and Installing the Power Supply, page 4-11

• Installing and Removing the SFP Modules, page 4-13

Removing and Replacing the Chassis Cover

This section describes how to remove and replace the chassis cover. This section includes the following
topics:

4

• Removing the Chassis Cover, page 4-1

• Replacing the Chassis Cover, page 4-2s

Removing the Chassis Cover

To remove the chassis cover, perform the following steps:

Step 1 Read the Regulatory Compliance and Safety Information for the Cisco ASA 5500-X Series document.

Step 2 Power off the chassis.

Warning

Step 3 Turn the thumbscrew on the front of the chassis. See Figure 4-1. You may need to use a screwdriver if

Before working on a system that has an On/Off switch, turn OFF the power and unplug the power cord.

Statement 1

the screw is too tight.

Note Removing the chassis cover does not affect Cisco warranty. Upgrading the ASA does not require

any special tools and does not create any radio frequency leaks.

Cisco ASA 5500-X Series Hardware Installation Guide

4-1

Removing and Replacing the Chassis Cover

282506

1

Figure 4-1 Removing the Chassis Cover

1 Thumbscrew

Step 4 With the rear of the chassis facing you, pull the chassis cover forward then lift the cover up. (See

Figure 4-1.)

Step 5 Place the cover in a safe place.

Chapter 4 Maintenance and Upgrade Procedures

Replacing the Chassis Cover

Caution Do not operate the ASA without the chassis cover installed. The chassis cover protects the internal

components, prevents electrical shorts, and provides proper air-flow for cooling the electronic
components.

To replace the chassis cover, perform the following steps:

Step 1 Place the chassis on a secure surface with the front panel facing you.

Step 2 Lower the front of the chassis cover onto the chassis, slide it forward until it fits into place, and tighten

the thumbscrew to secure the chassis cover. (See

Figure 4-2.)

Cisco ASA 5500-X Series Hardware Installation Guide

4-2

Chapter 4 Maintenance and Upgrade Procedures

1

Figure 4-2 Replacing the Chassis Cover

1 Thumbscrew

Installing an I/O Card in the Cisco ASA 5512-X, 5515-X, and 5525-X Chassis

Step 3 Reinstall the chassis on a rack.

Step 4 Reinstall the network interface cables.

Step 5 Power on the chassis.

Installing an I/O Card in the Cisco ASA 5512-X, 5515-X, and
5525-X Chassis

To remove an existing I/O card and install a new one, perform the following steps:

Step 1 Power off the chassis, remove the power cable from the chassis, and remove the chassis from the rack.

Step 2 Locate a grounding strap, and fasten it to your wrist so that it contacts bare skin. Attach the other end to

the chassis. See the

Step 3 With a Phillips head screwdriver, loosen the captive installation screw on the rear of the chassis

Step 4 Remove the chassis cover by placing your hand on top of the chassis lid, pressing down firmly, and

pushing the cover toward the rear of the chassis.

Step 5 Determine the location of the I/O card. (See Figure 4-3.)

“Working in an ESD Environment” section on page 2-3 for more information.

Cisco ASA 5500-X Series Hardware Installation Guide

4-3

Installing an I/O Card in the Cisco ASA 5512-X, 5515-X, and 5525-X Chassis

-A--A-

-B--B-

-A--A-

-B--B-

-A--A-

-B--B-

-A--A-

-B--B-

-C--C-

-B--B-

-C--C-

-B--B-

-B--B-

PUSH AND LIFT TAB

Figure 4-3 I/O Card Location

Chapter 4 Maintenance and Upgrade Procedures

1

2

282498

1 I/O Card holder

2 Power supply

Caution You must disconnect the blue Regex flexible circuit connector from the motherboard before removing

the I/O card from the chassis. The copper-colored Regex flexible circuit can break during the I/O card
removal or installation process, so handle it with care.

Step 6 To expose the blue connector of the Regex flexible circuit, push down on the center of the green

connector clamp, and lift the right end of the clamp to release the lock. (See

Figure 4-4.)

Figure 4-4 Removing the Connector Clamp

Cisco ASA 5500-X Series Hardware Installation Guide

4-4

Chapter 4 Maintenance and Upgrade Procedures

331355

-A-

-B-

-A--A-

-B-

-A-

-B-

-A--A-

-B-

-C-

-B-

-C-

-B-

-B-

Step 7 Disconnect the blue Regex cable connector from the motherboard by lifting carefully but firmly. (See

Figure 4-5.)

Figure 4-5 Removing the Regex Cable Connector

Installing an I/O Card in the Cisco ASA 5512-X, 5515-X, and 5525-X Chassis

-A-

-A-

-B-

-B-

-C-

-C-

-B-

-B-

-B-

-B-

-B-

Step 8 Lift the I/O card out of the chassis with both hands by placing an index finger into each of the card cover

vents and placing your thumbs on the edge of the card cover. (See

Figure 4-6.) Use firm upward pressure

and a gentle rocking motion, as the card is firmly seated.

Caution Keep hands clear of all electronics underneath the card cover.

Cisco ASA 5500-X Series Hardware Installation Guide

4-5

Installing an I/O Card in the Cisco ASA 5512-X, 5515-X, and 5525-X Chassis

331354

1 2

21

331399

Figure 4-6 Lift the I/O Card Upward to Release it

Chapter 4 Maintenance and Upgrade Procedures

1 Index finger placem ent
2 Thumb placement

Step 9 Insert the new I/O card into the chassis. (See Figure 4-7.) The I/O card fits properly if the following

criteria are met:

a. The PCIe bus is properly inserted on the motherboard

b. The small black plastic guide slides all the way into the chassis

c. The two hooks on the assembly plug into the two slots on the edge of the chassis

Figure 4-7 Installing the I/O Card

Cisco ASA 5500-X Series Hardware Installation Guide

4-6

Chapter 4 Maintenance and Upgrade Procedures

282498

1

2

Installing an I/O Card in the Cisco ASA 5545-X and 5555-X Chassis

Step 10 Connect the blue connector end of the Regex ribbon cable to the motherboard, and close the green tab.

Step 11 Install the chassis cover, and replace the chassis in the rack.

Step 12 Install the power cable, and restore power to the chassis. The LEDs will blink when traffic begins to pass

through.

Installing an I/O Card in the Cisco ASA 5545-X and 5555-X
Chassis

To replace an I/O card in an ASA 5545-X or 5555-X chassis, follow these steps:

Step 1 Power off the chassis, remove the power cable from the chassis, and remove the chassis from the rack.

Step 2 Locate a grounding strap, and fasten it to your wrist so that it contacts bare skin. Attach the other end to

the chassis. See the

“Working in an ESD Environment” section on page 2-3 for more information.

Step 3 With your fingers, loosen the captive installation screw on the rear of the chassis.

Step 4 Remove the chassis cover by placing your hand on top of the chassis lid, pressing down firmly, and

pushing the cover toward the rear of the chassis.

Step 5 Determine the location of the I/O card. (See Figure 4-8.)

Figure 4-8 I/O Card Location

1 I/O Card holder

2 Power supply

Note You must disconnect the blue Regex flexible circuit connector from the motherboard before

removing the I/O card from the chassis. The copper-colored Regex flexible circuit can break
during the I/O card removal or installation process, so handle it with care.

Step 6 To expose the blue connector on the end of the Regex flexible circuit, push down on the center of the

green connector clamp, and lift the end of the clamp to release the lock. (See

Cisco ASA 5500-X Series Hardware Installation Guide

Figure 4-9.)

4-7

Installing an I/O Card in the Cisco ASA 5545-X and 5555-X Chassis

331353

-A--A-

-B--B-

-A--A-

-B--B-

-B--B-

-A--A-

-B--B-

-A--A-

-B--B-

-B--B-

-C--C-

-B--B-

-C--C-

-B--B-

PUSH AND LIFT TAB

Figure 4-9 Removing the Connector Clamp

Chapter 4 Maintenance and Upgrade Procedures

Cisco ASA 5500-X Series Hardware Installation Guide

4-8

Chapter 4 Maintenance and Upgrade Procedures

331350

-A--A-

-B--B-

-A--A-

-B--B-

-B--B-

-A--A-

-B--B-

-A--A-

-B--B-

-B--B-

-C--C-

-B--B-

-C--C-

-B--B-

331354

1 2

21

Step 7 Disconnect the blue connector from the board by lifting carefully but firmly. (See Figure 4-10.)

Figure 4-10 Removing the Regex Cable Connector

Installing an I/O Card in the Cisco ASA 5545-X and 5555-X Chassis

Step 8 Lift the I/O card out of the chassis with both hands by placing an index finger into each of the card cover

vents and placing a thumb on the edge of the card cover. (See
and a gentle rocking motion, as the card is firmly seated.

Figure 4-11 Lift the I/O Card Upward to Release it

Figure 4-11.) Use firm upward pressure

1 Index finger placem ent
2 Thumb placement

Cisco ASA 5500-X Series Hardware Installation Guide

4-9

Installing an I/O Card in the Cisco ASA 5545-X and 5555-X Chassis

331351

-A--A-

-B--B-

-A--A-

-B--B-

-B--B-

-A--A-

-B--B-

-A--A-

-B--B-

-B--B-

-B--B-

-C--C-

-B--B-

Step 9 Insert the new I/O card into the chassis. (See Figure 4-12.)

The I/O card holder fits properly if the following criteria are met:

a. The PCIe bus is properly inserted on the motherboard.

b. The small black plastic guide slides all the way into the chassis.

c. The two hooks on the assembly plug into the two slots on the edge of the chassis.

Figure 4-12 Inserting a New I/O Card

Chapter 4 Maintenance and Upgrade Procedures

330134

Step 10 Carefully feed the flexible Regex circuit into the yellow channel on the chassis side (see Figure 4-13),

and reconnect the blue Regex cable connector end to the motherboard.

Figure 4-13 Feeding Regex Flexible Circuit through Channel and Reconnecting

Cisco ASA 5500-X Series Hardware Installation Guide

4-10

Chapter 4 Maintenance and Upgrade Procedures

Step 11 Close the green connector clamp.

Step 12 Install the chassis cover, and replace the chassis in the rack.

Step 13 Install the power cable, and restore power to the chassis. The LEDs will blink when traffic begins to pass

through.

Removing and Installing the Power Supply

The ASA 5545-X and 5555-X models ship with one power supply installed. You can add an additional
power supply, or you can order these appliances with two power supplies installed. Having two power
supplies installed provides a redundant power option. This configuration ensures that if one power
supply fails, the other power supply assumes the full load until the failed power supply is replaced. To
maintain airflow, an empty bay must be covered, or both bays must be populated with power supplies.

If only one power supply is installed, do not remove the power supply unless the appliance has been
powered off. Removing the only operational power supply causes an immediate power loss.

Removing and Installing the Power Supply

Caution If you remove a power supply, replace it immediately to prevent disruption of service.

Caution If the appliance is subjected to environmental overheating, it shuts down and you must manually power

cycle the appliance.

Warning

Caution For DC power supplies, use an 80 VDC 20A fuse or circuit breaker on the input during installation.

This unit has more than one power supply connection; all connections must be removed completely
to completely remove power from the unit.

Statement 102

To remove and install the power supply, follow these steps:

Step 1 If you are adding an additional power supply, from the back of the appliance, push the lever on the slot

cover to the left to release it, grasp the handle of the slot cover and pull it away from the chassis. Save
the slot cover for future use. (See

Figure 4-14 Remove the Power Supply Slot Cover

Figure 4-14.) Continue with Step 3.

Cisco ASA 5500-X Series Hardware Installation Guide

4-11

Removing and Installing the Power Supply

Step 2 If you are replacing a power supply, follow these steps:

a. Power off the appliance.

b. From the back panel of the appliance, unplug the power supply cable.

c. Push the lever on the power supply to the left and remove the power supply by grasping the handle

and then pulling the power supply away from the chassis. (See

Figure 4-15 Remove the Power Supply

Step 3 Install the new power supply by aligning it with the power supply bay and pushing it into place until it

is seated. (See

Chapter 4 Maintenance and Upgrade Procedures

Figure 4-15.) Continue with Step 3.

331089

Figure 4-16.)

Figure 4-16 Seat the Power Supply

Step 4 Connect the power cable. If you are installing two power supplies for a redundant configuration, plug

each one into a power source. (We recommend a UPS.)

Step 5 Power on the appliance if you powered it off to replace the only power supply.

Step 6 Check the PS0 and PS1 indicators on the front panel to make sure they are green.

Step 7 On the back panel of the appliance, make sure the power supply indicators for PS0 and PS1 on the bottom

of each installed power supply are green. (See

Figure 4-17.)

Cisco ASA 5500-X Series Hardware Installation Guide

4-12

Chapter 4 Maintenance and Upgrade Procedures

331087

PS1

PS0

Figure 4-17 Verify Power Indicators are Green

Installing and Removing the SFP Modules

Installing and Removing the SFP Modules

The SFP module is a hot-swappable input/output device that plugs into the SFP ports. The Cisco ASA
5500-X series chassis support the following SFP module types:

• Long wavelength/long haul 1000BASE-LX/LH (GLC-LH-SM=)

• Short wavelength 1000BASE-SX (GLC-SX-MM=)

This section describes how to install and remove the SFP modules in the ASA to provide optical Gigabit
Ethernet connectivity, and it includes the following topics:

• SFP Module, page 4-13

• Installing the SFP Module, page 4-15

• Removing the SFP Module, page 4-15

SFP Module

The ASA uses a field-replaceable SFP module to establish Gigabit Ethernet connections. Tabl e 4- 1 lists
the supported SFP modules.

Table 4-1 Supported SFP Modules

SFP Module Type of Connection Cisco Part Number

1000BASE-LX/LH Fiber-optic GLC-LH-SM=

1000BASE-SX Fiber-optic GLC-SX-MM=

Cisco ASA 5500-X Series Hardware Installation Guide

4-13

Installing and Removing the SFP Modules

The 1000BASE-LX/LH and 1000BASE-SX SFP modules are used to establish fiber-optic connections.
Use fiber-optic cables with LC connectors to connect to an SFP module. The SFP modules support 850
to 1550 nm nominal wavelengths. The cables must not exceed the required cable length for reliable
communications. Tab le 4 - 2 lists the cable length requirements.

Table 4-2 Cabling Requirements for Fiber-Optic SFP Modules

Chapter 4 Maintenance and Upgrade Procedures

62.5/125 micron
SFP
Module

Multimode 850
nm

Fiber

LX/LH — — 550 m at

SX 275 m at

200 Mhz-km

50/125 micron
Multimode 850
nm Fiber

550 m at
500 Mhz-km

62.5/125 micron
Multimode 1310
nm Fiber

500 Mhz-km

50/125 micron
Multimode 1310
nm Fiber

550 m at
400 Mhz-km

9/125 micron
Single-mode
1310 nm Fiber

10 km

———

Use only Cisco certified SFP modules on the ASA. Each SFP module has an internal serial EEPROM
that is encoded with security information. This encoding provides a way for Cisco to identify and
validate that the SFP module meets the requirements for the ASA.

Note Only SFP modules certified by Cisco are supported on the ASA.

Caution Protect your SFP modules by inserting clean dust plugs into the SFPs after the cables are extracted from

them. Be sure to clean the optic surfaces of the fiber cables before you plug them back into the optical
bores of another SFP module. Avoid getting dust and other contaminants into the optical bores of your
SFP modules. The optics do not operate correctly when obstructed with dust.

4-14

Warning

Cisco ASA 5500-X Series Hardware Installation Guide

Because invisible laser radiation may be emitted from the aperture of the port when no cable is
connected, avoid exposure to laser radiation and do not stare into open apertures.

Statement 70

Chapter 4 Maintenance and Upgrade Procedures

132985

1

3

2

Installing the SFP Module

To install the SFP module, perform the following steps:

Step 1 Align the SFP module with the port, and slide the SFP module into the port slot until it locks into

position, as shown in Figure 4-18.

Figure 4-18 Installing an SFP Module

Installing and Removing the SFP Modules

1 Optical port plug 2 SFP port slot

3 SFP module

Caution Do not remove the optical port plugs from the SFP until you are ready to connect the cabling.

Step 2 Remove the optical port plug, and then connect the network cable to the SFP module.

Step 3 Connect the other end of the cable to your network.

Removing the SFP Module

SFP modules use various latch designs to secure the SFP modules in the SFP ports. The following list
includes the different module design types:

• Mylar Tab Module

• Actuator/Button SFP Module

• Bale-Clasp SFP Module

• Plastic Collar Module

Note Latch designs are not linked to SFP model or technology types. For information about SFP models and

technology types, see the label on the side of your SFP.

Cisco ASA 5500-X Series Hardware Installation Guide

4-15

Installing and Removing the SFP Modules

117722

1 2 3 4

A

B

To remove the SFP module, perform the following steps:

Step 1 Disconnect all cables from the SFP.

Chapter 4 Maintenance and Upgrade Procedures

Warning

Because invisible laser radiation may be emitted from the aperture of the port when no cable is
connected, avoid exposure to laser radiation and do not stare into open apertures.

Caution Do not pull on the cabling in an attempt to remove the SFP.

Step 2 Disconnect your particular SFP latch, as shown in Figure 4-19.

Figure 4-19 Disconnecting SFP Latch Mechanisms

1 Mylar tab 2 Actuator/Button

3 Bale-clasp 4 Plastic collar

Statement 70

Step 3 Grasp the SFP on both sides, and remove it from the port.

Cisco ASA 5500-X Series Hardware Installation Guide

4-16

H5318

231 45678Pin Label

1

2

3

4

5

6

7

8

RD+

RD-

TD+

NC

NC

TD-

NC

NC

Identifying Cable Pinouts

This appendix describes pinout information for 10/100/1000BaseT ports, console the RJ-45 to DB-9 ports,
and the Management 10/100/1000 Ethernet ports.

This chapter includes the following sections:

• 10/100/1000BaseT Connectors, page 5-1

• Console Port (RJ-45), page 5-2

• RJ-45 to DB-9, page 5-3

• MGMT 10/100/1000 Ethernet Port, page 5-4

• Gigabit and Fibre Channel Ports, page 5-4

10/100/1000BaseT Connectors

APPENDIX

5

The ASA supports 10/100/1000BaseT ports. You must use at least a Category 5 cable for 100/1000baseT
operations, but a Category 3 cable can be used for 10BaseT operations.

The 10/100/1000BaseT ports use standard RJ-45 connectors and support MDI and MDI-X connectors.
Ethernet ports normally use MDI connectors, and Ethernet ports on a hub normally use an MDI-X connector.

Use an Ethernet straight-through cable to connect an MDI to an MDI-X port. Use a cross-over cable to
connect an MDI to an MDI port, or an MDI-X to an MDI-X port.

Figure 5-1 shows the 10BaseT and the 100BaseTX connector (RJ-45).

Figure 5-1 10/100 Port Pinouts

Cisco ASA 5500-X Series Hardware Installation Guide

5-1

Console Port (RJ-45)

231 45678Pin Label

1

2

3

4

5

6

7

8

TP0+

TP0-

TP1+

TP2+

TP2-

TP1-

TP3+

TP3-

H2936

8 7 6 5 4 3 2 1

RJ-45 connector

Appendix 5 Identifying Cable Pinouts

Figure 5-2 shows the 10BaseT, 100BaseTX, and 1000BASE-T connector (RJ-45).

Figure 5-2 10/100/1000 Port Pinouts

Console Port (RJ-45)

Cisco products use the following types of RJ-45 cables:

• Straight-through

• Crossover

Note Cisco does not provide these cables, yet they are widely available from other sources.

Figure 5-3 shows the RJ 45 cable.

Figure 5-3 RJ-45 Cable

5-2

Cisco ASA 5500-X Series Hardware Installation Guide

Appendix 5 Identifying Cable Pinouts

H5663

To identify the RJ-45 cable type, hold the two ends of the cable next to each other so that you can see
the colored wires inside the ends, as shown in

Figure 5-4 RJ-45 Cable Identification

Examine the sequence of colored wires to determine the type of RJ-45 cable, as follows:

• Straight-through—The colored wires are in the same sequence at both ends of the cable.

• Crossover—The first (far left) colored wire at one end of the cable is the third colored wire at the

Table 5-1 lists the rolled (console) cable pinouts for RJ-45.

Ta b l e 5-1 RJ-45 Rolled (Console) Cable Pinouts

RJ-45 to DB-9

Figure 5-4.

other end of the cable.

Signal Pin Pin Pin

- 1 8 -

- 2 7 -

- 3 6 -

- 4 5 -

- 5 4 -

- 6 3 -

- 7 2 -

- 8 1 -

RJ-45 to DB-9

Table 5-2 lists the cable pinouts for RJ-45 to DB-9 or DB-25.

Ta b l e 5-2 Cable Pinouts for RJ-45 to DB-9 or DB-25

Signal RJ-45 Pin DB-9 Pin

RTS 1 7

DTR 2 4

TxD 3 3

GND 4 5

Cisco ASA 5500-X Series Hardware Installation Guide

5-3

MGMT 10/100/1000 Ethernet Port

Table 5-2 Cable Pinouts for RJ-45 to DB-9 or DB-25 (continued)

Signal RJ-45 Pin DB-9 Pin

GND 5 5

RxD 6 2

DSR 7 6

CTS 8 8

MGMT 10/100/1000 Ethernet Port

The MGMT 10/100/1000 Ethernet port is an Ethernet port with an RJ-45 connector. You can use a
modular, RJ-45, straight-through UTP cable to connect the management port to an external hub, switch,
or router.

Table 5-3 lists the cable pinouts for 10/100/1000BASE-T Management Port Cable Pinouts (MDI). (See
Figure 5-2 for an illustration of the pinouts.)

Appendix 5 Identifying Cable Pinouts

Ta b l e 5-3 10/100/1000BASE-T Management Port Cable Pinouts (MDI)

Signal Pin

TP0+ 1

TP0- 2

TP1+ 3

TP2+ 6

TP2- 4

TP1- 5

TP3+ 7

TP3- 8

Gigabit and Fibre Channel Ports

Table 5-4 lists the types of SFP modules and connectors used in the ASA.

Ta b l e 5-4 Types of SFP Modules and Connectors

Port Compliance Connector Fiber Type

Gigabit Ethernet 1000BASE-SX SW MMF

1000BASE-LX LW SMF

Table 5-5 lists the SFP port cabling specifications for the SFP modules and connectors used in the ASA.

Cisco ASA 5500-X Series Hardware Installation Guide

5-4

Appendix 5 Identifying Cable Pinouts

Ta b l e 5-5 SFP Port Cabling Specifications

Gigabit and Fibre Channel Ports

Cisco Product
Number

GLC-SX-MM= 850 62.5

Wavelength
(nanometer)

Core Size
(micron)

50.0

Baud Rate Cable Distance

1.0625

1.0625

300 m

500 m

GLC-LH-SM= 1300 9.0 1.0625 10 km

Cisco ASA 5500-X Series Hardware Installation Guide

5-5

Gigabit and Fibre Channel Ports

Appendix 5 Identifying Cable Pinouts

Cisco ASA 5500-X Series Hardware Installation Guide

5-6

Numerics

1000 W power supplies

power cords (table)

A

AC-input power cords

product numbers (table)

ASA 5585-X

power supply modules

installing

removing 4-11

4-11

2-5

2-5

INDEX

2-7

tips

ESD

preventing

2-3

F

failover 1-3, 3-2

fans

ventilation

2-7

H

hardware specifications 1-11

C

chassis covers

removing

replacing 4-2

Cisco warranty 2-2

Console port 3-3

4-1

D

data sheet

5512-X and 5515-X

5525-X, 5545-X, 5555-X 1-12

E

electrostatic discharge

see ESD

equipment racks

1-11

I

I/O card

replacing in an ASA 5512-X, 5515-X, 5525-X

replacing in an ASA 5545-X, 5555-X 4-7

interface cables

auxiliary port

connecting 3-2

console port 3-3

management port 3-3

3-3

M

MGMT 3-3

P

panel

removing

4-2

4-3

Cisco ASA 5500-X Series Hardware Installation Guide

IN-1

Index

power supply

considerations

2-5

removing and installing 4-11

power supply modules

installing

4-11

removing 4-11

R

rack mounting

5512-X, 5515-X, 5525-X

5545-X, 5555-X 3-2

redundant power option 4-11

RJ-45 connector

pinouts

5-3

3-2

S

safety 2-2

SFP module

cabling requirements

installing and removing 4-13

supported modules 4-13

site environment 2-4

V

ventilation fans 2-7

W

warranty 2-2

4-14

Cisco ASA 5500-X Series Hardware Installation Guide

IN-2