Cisco ASA5500-HW - Hardware Accessory Kit Network Device, ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X Hardware Installation Manual

Cisco ASA 5500-X Series Hardware
Installation Guide

for the Cisco ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X Chassis

Americas Headquarters

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]

800 553-NETS (6387)

Fax: [phone]

Text Part Number: N/A

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The following inform ation is for FCC compliance of Class A devices: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant
to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial
environment. This equipment generates, uses, and can radiate radio-frequency energy and, if not installed and used in accordance with the instruction manual, may cause
harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required
to correct the interference at their own expense.

The following information is for FCC compliance of Class B devices: The equipment described in this manual generates and may radiate radio-frequency energy. If it is not
installed in accordance with Cisco’s installation instructions, it may cause interference with radio and television reception. This equipment has been tested and found to
comply with the limits for a Class B digital device in accordance with the specifications in part 15 of the FCC rules. These specifications are designed to provide reasonable
protection against such interference in a residential installation. However, there is no guarantee that interference will not occur in a particular installation.

Modifying the equipment without Cisco’s written authorization may result in the equipment no longer complying with FCC requirements for Class A or Class B digital
devices. In that event, your right to use the equipment may be limited by FCC regulations, and you may be required to correct any interference to radio or television
communications at your own expense.

You can determine whether your equipment is causing interference by turning it off. If the interference stops, it was probably caused by the Cisco equipment or one of its
peripheral devices. If the equipment causes interference to radio or television reception, try to correct the interference by using one or more of the following measures:

• Turn the television or radio antenna until the interference stops.

• Move the equipment to one side or the other of the television or radio.

• Move the equipment farther away from the television or radio.

• Plug the equipment into an outlet that is on a different circuit from the television or radio. (That is, make certain the equipment and the television or radio are on circuits
controlled by different circuit breakers or fuses.)

Modifications to this product not authorized by Cisco Systems, Inc. could void the FCC approval and negate your authority to operate the product.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this
URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)

Cisco ASA 5500-X Series Hardware Installation Guide

©2012 Cisco Systems, Inc. All rights reserved.

Text Part Number:

CONTENTS

About This Guide v

Document Objectives v

Audience v

Document Organization v

Document Conventions vi

Installation Warnings vi

Where to Find Safety and Warning Information x

Obtaining Documentation and Submitting a Service Request 1-x

CHAPTER

CHAPTER

CHAPTER

1 Overview 1-1

Product Overview 1-2

Memory Requirements 1-5

2 Preparing for Installation 2-1

Overview 2-1

Installation Overview 2-1

Safety Recommendations 2-2

Maintaining Safety with Electricity 2-2
Preventing Electrostatic Discharge Damage 2-3

General Site Requirements 2-4

Site Environment 2-4
Preventive Site Configuration 2-4
Power Supply Considerations 2-4
Configuring Equipment Racks 2-6

3 Installing the Adaptive Security Appliance 3-1

Installing the Adaptive Security Appliance 3-1

Rack-Mounting the Chassis 3-2
Setting the Chassis on a Desktop 3-3
Connecting the Interface Cables 3-4

CHAPTER

4 Maintenance and Upgrade Procedures 4-1

Removing and Replacing the Chassis Cover 4-1

Cisco ASA 5500-X Series Hardware Installation Guide

iii

Removing the Chassis Cover 4-1
Replacing the Chassis Cover 4-2

Working in an ESD Environment 4-3

Installing and Removing the SFP Modules 4-15

SFP Module 4-16
Installing the SFP Module 4-17
Removing the SFP Module 4-18

CONTENTS

APPENDIX

I

NDEX

1 Cable Pinouts 1-1

10/100/1000BaseT Connectors 1-1

Console Port (RJ-45) 1-2

RJ-45 to DB-9 1-4

MGMT 10/100/1000 Ethernet Port 1-4

Gigabit and Fibre Channel Ports 1-5

Cisco ASA 5500-X Series Hardware Installation Guide

iv

About This Guide

This preface includes the following sections:

• Document Objectives, page v

• Audience, page v

• Document Organization, page vi

• Document Conventions, page vi

• Installation Warnings, page vii

• Related Documentation, page xi

• Where to Find Safety and Warning Information, page xi

• Obtaining Documentation and Submitting a Service Request, page xi

Document Objectives

This guide describes how to install and maintain the Cisco ASA 5500-X series appliances. Information
in this guide applies to the following Cisco ASA 5500-X Series models: ASA 5512-X, ASA 5515-X,
ASA 5525-X, ASA 5545-X, and ASA 5555-X. References to “Cisco ASA 5500-X Series” and “ASA”
apply to all previously listed models unless specifically noted otherwise.

Audience

This guide is for experienced network security administrators who install, configure, and maintain
Cisco ASAs in their networks.

Cisco ASA 5500-X Series Hardware Installation Guide

v

Document Organization

Chapter Title Description

1“ASA Chassis Overview” Describes the ASA product and its specifications

2“Preparing for Installation” Describes steps to follow before installing ASAs

3“Installing and Connecting the ASA” Describes how to install an ASA in a rack and how

4“Maintenance and Upgrade

Procedures”

Appendix “Identifying Cable Pinouts” Describes the cable pinouts

Document Conventions

About This Guide

to connect interface cables

Describes how to remove and replace the chassis
cover, the power supply, the optional I/O card, and
the SFPs

Command descriptions use these conventions:

• Braces ({ }) indicate a required choice.

• Square brackets ([ ]) indicate optional elements.

• Vertical bars (|) separate alternative, mutually exclusive elements.

• Boldface indicates commands and keywords that are entered literally as shown.

• Italics indicate arguments for which you supply values.

Examples use these conventions:

• Examples depict screen displays and the command line in screen font.

• Information you need to enter in examples is shown in boldface screen font.

• Variables for which you must supply a value are shown in

Graphical user interface examples uses these conventions:

• Boldface indicates buttons and menu items.

• Selecting a menu item (or pane) is indicated by the following convention:

Choose Start > Settings > Control Panel.

Note Means reader take note. Notes contain helpful suggestions or references to material not covered in the

manual.

italic screen

font.

Cisco ASA 5500-X Series Hardware Installation Guide

vi

About This Guide

Installation Warnings

Be sure to read the Regulatory Compliance and Safety Information document at before installing the chassis.
This document contains important safety information. This section includes the following warnings:

• Power Supply Disconnection Warning, page vii

• Jewelry Removal Warning, page vii

• Wrist Strap Warning, page viii

• More than One Power Supply Warning, page viii

• Work During Lightning Activity Warning, page viii

• Installation Instructions Warning, page viii

• Chassis Warning for Rack-Mounting and Servicing, page viii

• SELV Circuit Warning, page viii

• Ground Conductor Warning, page viii

• Blank Faceplates and Cover Panels Warning, page ix

• Product Disposal Warning, page ix

• Short-Circuit Protection Warning, page ix

• Compliance with Local and National Electrical Codes Warning, page ix

• DC Power Connection Warning, page ix

• AC Power Disconnection Warning, page ix

• TN Power Warning, page ix

• 48 VDC Power System, page x

• Multiple Power Cord, page x

• Circuit Breaker (15A) Warning, page x

• Grounded Equipment Warning, page x

• Safety Cover Requirement, page x

• Faceplates and Cover Panel Requirement, page x

Power Supply Disconnection Warning

Warning

Before working on a chassis or working near power supplies, unplug the power cord on AC units;
disconnect the power at the circuit breaker on DC units.

Jewelry Removal Warning

Statement 12

Warning

Before working on equipment that is connected to power lines, remove jewelry (including rings,
necklaces, and watches). Metal objects will heat up when connected to power and ground and can
cause serious burns or weld the metal object to the terminals.

Statement 43

Cisco ASA 5500-X Series Hardware Installation Guide

vii

Wrist Strap Warning

About This Guide

Warning

During this procedure, wear grounding wrist straps to avoid ESD damage to the card. Do not directly
touch the backplane with your hand or any metal tool, or you could shock yourself.

More than One Power Supply Warning

Warning

This unit has more than one power supply connection; all connections must be removed completely
to completely remove power from the unit.

Work During Lightning Activity Warning

Warning

Do not work on the system or connect or disconnect cables during periods of lightning activity.

Statement 1001

Installation Instructions Warning

Warning

Read the installation instructions before connecting the system to the power source.

Chassis Warning for Rack-Mounting and Servicing

Statement 94

Statement 102

Statement 1004

Warning

To prevent bodily injury when mounting or servicing this unit in a rack, you must take special
precautions to ensure that the system remains stable. The following guidelines are provided to ensure
your safety:

this unit in a partially filled rack, load the rack from the bottom to the top with the heaviest component at the bottom
of the rack.If the rack is provided with stabilizing devices, install the stabilizers before mounting or servicing the unit
in the rack.

SELV Circuit Warning

Warning

To avoid electric shock, do not connect safety extra-low voltage (SELV) circuits to telephone-network
voltage (TNV) circuits. LAN ports contain SELV circuits, and WAN ports contain TNV circuits. Some
LAN and WAN ports both use RJ-45 connectors. Use caution when connecting cables.

Ground Conductor Warning

Warning

This equipment must be grounded. Never defeat the ground conductor or operate the equipment in the
absence of a suitably installed ground conductor. Contact the appropriate electrical inspection
authority or an electrician if you are uncertain that suitable grounding is available.

This unit should be mounted at the bottom of the rack if it is the only unit in the rack.When mounting

Statement 1006

Statement 1021

Statement 1024

Cisco ASA 5500-X Series Hardware Installation Guide

viii

About This Guide

Blank Faceplates and Cover Panels Warning

Warning

Blank faceplates and cover panels serve three important functions: they prevent exposure to
hazardous voltages and currents inside the chassis; they contain electromagnetic interference (EMI)
that might disrupt other equipment; and they direct the flow of cooling air through the chassis. Do not
operate the system unless all cards, faceplates, front covers, and rear covers are in place.

1029

Product Disposal Warning

Warning

Ultimate disposal of this product should be handled according to all national laws and regulations.

Statement 1040

Short-Circuit Protection Warning

Warning

This product requires short-circuit (overcurrent) protection, to be provided as part of the building
installation. Install only in accordance with national and local wiring regulations.

Compliance with Local and National Electrical Codes Warning

Warning

Installation of the equipment must comply with local and national electrical codes.

Statement

Statement 1045

Statement 1074

DC Power Connection Warning

Warning

After wiring the DC power supply, remove the tape from the circuit breaker switch handle and
reinstate power by moving the handle of the circuit breaker to the ON position.

AC Power Disconnection Warning

Warning

Before working on a chassis or working near power supplies, unplug the power cord on AC units.

Statement 246

TN Power Warning

Warning

The device is designed to work with TN power systems.

Statement 19

Statement 8

Cisco ASA 5500-X Series Hardware Installation Guide

ix

48 VDC Power System

About This Guide

Warning

The customer 48 volt power system must provide reinforced insulation between the primary AC power
and the 48 VDC output.

Multiple Power Cord

Warning

This unit has more than one power cord. To reduce the risk of electric shock when servicing a unit,
disconnect the power cord of the power strip that the unit is plugged into.

Circuit Breaker (15A) Warning

Warning

This product relies on the building’s installation for short-circuit (overcurrent) protection. Ensure that
a fuse or circuit breaker no larger than 120
phase conductors (all current-carrying conductors).

Grounded Equipment Warning

Warning

This equipment is intended to be grounded. Ensure that the host is connected to earth ground during
normal use.

Statement 128

Statement 137

VAC, 15A U.S. (240 VAC, 10A international) is used on the

Statement 13

Statement 39

Safety Cover Requirement

Warning

The safety cover is an integral part of the product. Do not operate the unit without the safety cover
installed. Operating the unit without the cover in place will invalidate the safety approvals and pose
a risk of fire and electrical hazards.

Faceplates and Cover Panel Requirement

Warning

Blank faceplates and cover panels serve three important functions: they prevent exposure to
hazardous voltages and currents inside the chassis; they contain electromagnetic interference (EMI)
that might disrupt other equipment; and they direct the flow of cooling air through the chassis. Do not
operate the system unless all cards, faceplates, front covers, and rear covers are in place.

142

Statement 117

Statement

Cisco ASA 5500-X Series Hardware Installation Guide

x

About This Guide

Where to Find Safety and Warning Information

For safety and warning information, see the Regulatory Compliance and Safety Information document
at the following URL:

http://www.cisco.com/en/US/docs/security/asa/roadmap/asaroadmap.html#wp57708

This RCSI document describes the international agency compliance and safety information for the
Cisco ASA 5500-X series. It also includes translations of the safety warnings used in this guide.

Related Documentation

For a complete list of the Cisco ASA 5500-X series documentation and where to find it, see the
documentation roadmap at the following URL:

http://www.cisco.com/en/US/docs/security/asa/roadmap/asaroadmap.html

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional
information, see the monthly What’s
revised Cisco

http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html

Subscribe to the What’s New in Cisco Product Documentation as an RSS feed and set content to be
delivered directly to your desktop using a reader application. The RSS feeds are a free service. Cisco currently
supports RSS Version 2.0.

technical documentation, at:

New in Cisco Product Documentation, which also lists all new and

Cisco ASA 5500-X Series Hardware Installation Guide

xi

About This Guide

Cisco ASA 5500-X Series Hardware Installation Guide

xii

CHA PTER

1

ASA Chassis Overview

This chapter describes the Cisco ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X chassis models.
We recommend that you read this entire guide before beginning any of the procedures contained herein.

Warning

Caution Read the safety warnings in the Regulatory Compliance and Safety Information document for the Cisco

Only trained and qualified personnel should install, replace, or service this equipment.

ASA 5500-X, and follow proper safety procedures when performing any tasks in this guide. See

http://www.cisco.com/go/asadocs for links to the RCSI and other ASA documents.

This chapter includes the following topics:

• Cisco ASA 5500-X Series Chassis Overview, page 1-1

• Memory Requirements, page 1-3

• Management 0/0 Interface on the ASA 5500-X Series, page 1-3

Statement 49

• External USB Support, page 1-2

• Alarm LED, page 1-4

• ASA 5500-X I/O Cards, page 1-4

• ASA Chassis Panels, page 1-4

• Hardware Specifications, page 1-11

Cisco ASA 5500-X Series Chassis Overview

This guide supports the Cisco ASA 5500-X series models, which includes the ASA 5512-X,
ASA

5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X.

The Cisco ASA 5500-X series is a family of next-generation mid-range ASAs that are built on the same
security platform as the rest of the ASA family. These next-generation ASAs provide more firewall
throughput (4X firewall throughput), better scaling, more Ethernet ports (up to 14 GE ports), dedicated
IPS acceleration hardware, and redundant power supplies on the 5545-X and 5555-X models. The IPS
is now context-aware, so it can be enabled through software by a virtual machine without requiring
additional hardware, which provides greater deployment flexibility.

For information about ASA 5500-X performance, see the “Hardware Specifications” section on

page 1-11.

Cisco ASA 5500-X Series Hardware Installation Guide

1-1

External USB Support

For information about IPS functionality within ASA, see Cisco Intrusion Prevention System
documentation at the following URL:

http://www.cisco.com/en/US/docs/security/ips/7.1/roadmap/19889_01.html

External USB Support

The Cisco ASA 5500-X series chassis have internal and external USB drives that use FAT32 file system.

Internal USB Drives

Embedded USB (eUSB) devices are used as the internal flash (disk0).

External USB Drives

The ASA 5500-X series is the first ASA hardware platform to support external USB flash drives for data
storage. Previous ASA platforms allowed an external compact flash that supported Online Insertion and
Removal (OIR), where disk1: became the unique identifier. The ASA 5500-X series follows this model,
using disk1: as the external USB flash drive identifier. When the ASA is powered on, an inserted USB
flash drive is mounted to disk1: and available for you to use. Additionally, the file system commands that
are available to disk0: are also available to disk1, including copy, format, delete, mkdir, pwd, cd, and
so on. When you remove the USB flash drive, the system unmounts disk1:, and disk1: becomes an invalid
file system label that you can no longer access.

Chapter 1 ASA Chassis Overview

Because the disk allowance is restricted to 2 disks (labeled as disk0 and disk1), and disk0 is occupied by
the internal eUSB on the ASA, disk1 is the disk label for the external USB drive. In this way, the system
mounts only one partition. For example, if you insert a USB drive with more than one partition, only the
first partition is mounted.

OIR Support

While the ASA back panel has two USB slots, only one is supported for OIR, with priority given to the
USB drive that was inserted first. For example, based upon the time sequence, the first inserted USB
flash drive is mounted to disk1, regardless of the slot in which you insert it. When you insert a second
USB device, an error message displays on the console to notify you that an extra, unsupported USB flash
drive exists. Removing either one of the USB devices does not change the priority that you just
established. To change the priority you must safely remove the USB device and begin again to establish
the desired priority.

FAT File System

The ASA 5500-X series supports only FAT32 formatted file systems for the eUSB and external USB
drives. It is important that the first partition of the inserted USB drive is in the FAT format. If it is not,
the system mounting process fails, and you receive an error message. You can enter the format disk1:
command to format the partition to FAT 32 and mount the partition to disk1 again: however, data might
be lost.

Cisco ASA 5500-X Series Hardware Installation Guide

1-2

Chapter 1 ASA Chassis Overview

Memory Requirements

The memory listed in Tabl e 1-1 is the default value that ships with each ASA.

Ta b l e 1-1 Memory Requirements for the ASA 5500-X Models

ASA Model Default DRAM Memory (GB)

Cisco ASA 5512-X 4

Cisco ASA 5515-X 8

Cisco ASA 5525-X 8

Cisco ASA 5545-X 12

Cisco ASA 5555-X 16

Check the amount of free memory on the ASA by doing the following:

• ASDM—Choose Tools > File Management. The amount of available memory appears on the

bottom left in the pane.

• CLI—In Privileged EXEC mode, enter the dir command. The amounts of available memory appears

at the bottom of the output.

Memory Requirements

In a failover configuration, the two units must have the same hardware configuration. They must be the
same model, have the same number and types of interfaces, and have the same amount of RAM.

Management 0/0 Interface on the ASA 5500-X Series

You manage the ASA through the Management 0/0 interface on the ASA 5512-X through ASA 5555-X
models. The Management 0/0 interface has the following characteristics:

• No through traffic support

• No subinterface support

• No priority queue support

• No multicast MAC support

• The IPS SSP software module and the ASA share the Management 0/0 interface; however, each has

its own separate MAC addresses and IP addresses. You must configure the IPS IP address within the
IPS operating system. However, you configure physical characteristics (such as enabling the
interface) on the ASA.

By default, the Management 0/0 interface is configured for management-only traffic, and you cannot
disable management-only for the Management interface. Also, the ASA 5500-X models do not allow
subinterfaces on the Management interface, so for per-context management, you must connect to a data
interface.

The Management 0/0 interface is configured for ASDM access as part of the default factory
configuration.

For more information, see the “Rear Panel Ports” section on page 1-9.

Cisco ASA 5500-X Series Hardware Installation Guide

1-3

Alarm LED

Alarm LED

The ASA 5500-X series chassis perform autonomous environment monitoring to poll all external sensors
and monitor operating conditions. In the event of damage to certain internal components or surpassed
temperature thresholds, the system activates an alarm LED to notify you of a critical condition. For
example, the alarm LED is activated by firmware in the event of various critical over-voltage and
over-temperature conditions, as well as when the ASA has missing or unrecognized internal chip
components. When the alarm LED lights, you can find details about the system condition from the
system message that appears on the console or by entering the show environment or show controller
pci command.

ASA 5500-X I/O Cards

The Cisco ASA 5500-X Series 6-port Gigabit Ethernet interface cards extend the I/O capabilities of the
ASA

5525-X, ASA 5545-X, and ASA 5555-X models by providing additional Gigabit Ethernet ports.

The I/O cards provide the following benefits:

• Segmentation of network traffic into separate security zones

Chapter 1 ASA Chassis Overview

• Fiber optic cable connectivity for communicating over long distances

• Load sharing of traffic and protection against link failure by using EtherChannel

• Support for Jumbo Ethernet frames of up to 9000 bytes

• Protection for Active/Active failover and of full-mesh firewall deployments against cable failure

For information about installing an I/O card in your ASA, see Chapter 4, “Maintenance and Upgrade

Procedures.”

ASA Chassis Panels

This section describes the front and rear ASA panels, and it includes the following topics:

• Front Panel LEDs, page 1-5

• Rear Panel LEDs, page 1-8

• Rear Panel Ports, page 1-9

Cisco ASA 5500-X Series Hardware Installation Guide

1-4

Chapter 1 ASA Chassis Overview

Cisco ASA 5515

Adapative Security Appliance

BOOT

ACTIVE

PS

ALARM

VPN

HD

Cisco ASA 5515

Adapative Security Appliance

BOOT

ACTIVE

PS

ALARM

VPN

HD

1

2

5

8

7

6

3

4

Front Panel LEDs

This section describes the front panel LEDs for the Cisco ASA 5500-X series chassis.

Figure 1-1 shows the front panel LEDs for the ASA 5512-X, ASA 5515-X, and ASA 5525-X models.

Figure 1-1 Front Panel LEDs for the Cisco ASA 5512-X, ASA 5515-X, and ASA 5525-X

ASA Chassis Panels

LED Description

1 Power button A hard switch that turns the system on and off. Once depressed, the

button stays in the “on” position:

• On—The power symbol on the button illuminates.

• Off—The power symbol on the button is dark.

For information about the power state, see the “Power Supply

Considerations” section on page 2-5.

2 Hard disk release button Releases the hard disk from the device.

3 Alarm Indicates system operating status:

• Off—Normal operating system function.

• Flashing amber—Critical Alarm indicating one or more of the

following:

–

a major failure of a hardware or software component.

–

an over-temperature condition.

–

power voltage is outside of the tolerance range.

4 VPN Indicates VPN tunnel status:

• Solid green—VPN tunnel is established.

• Off—No VPN tunnel is established.

Cisco ASA 5500-X Series Hardware Installation Guide

1-5

ASA Chassis Panels

Cisco ASA 5545

Adapative Security Appliance

BOOT
ACTIVE
PS1
PS0

ALARM
VPN
HD1
HD0

1

0

Cisco ASA 5545

Adapative Security Appliance

BOOT
ACTIVE
PS1
PS0

ALARM
VPN
HD1
HD0

1

0

1

3

4

9

2

13

12

11

10

5

6

7

8

Chapter 1 ASA Chassis Overview

5 HD Indicates Hard Disk Drive status:

• Flashing green—Proportioned to read/write activity.

• Solid amber—Hard disk drive failure.

• Off—No hard disk drive present.

6 PS Indicates the power supply status

7 Active Indicates the status of the failover pair:

• Solid green—Failover pair is operating normally.

• Off—Failover is not operational.

8 Boot Indicates power-up diagnostics:

• Flashing green—Power-up diagnostics are running, or system

is booting.

• Solid green—System has passed power-up diagnostics.

• Off—Power-up diagnostics are not operational.

Figure 1-2 shows the front panel LEDs for the ASA 5545-X and ASA 5555-X models.

Figure 1-2 Front Panel LEDs for Cisco ASA 5545-X and ASA 5555-X

LED Description

Power button A hard switch that turns the system on and off. Once depressed, the

1

Cisco ASA 5500-X Series Hardware Installation Guide

1-6

button stays in the “on” position:

• On—The power symbol on the button illuminates.

• Off—The power symbol on the button is dark.

For information about the power state, see the “Power Supply

Considerations” section on page 2-5.