Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Text Part Number: Online Only
Page 2
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
This chapter describes the hardware features of the Cisco ASA 5506-X series of security appliances, and
contains the following sections:
About the ASA 5506-X, ASA 5506W-X, and ASA 5506H-X, page 1
•
Package Contents, page 4
•
Front Panel, page 5
•
Rear Panel, page 6
•
LEDs, page 8
•
Network Ports, page 11
•
Console Ports, page 11
•
Internal and External Flash Storage, page 12
•
Solid State Drive, page 12
•
Power Supply Modules, page 13
•
Hardware Specifications, page 13
•
Power Cord Specifications, page 14
•
About the ASA 5506-X, ASA 5506W-X, and ASA 5506H-X
The Cisco ASA 5506-X, ASA 5506W-X, and ASA 5506H-X adaptive security appliances are part of the ASA
5500-X of next-generation mid-range ASAs and are built on the same security platform as the rest of the ASA
family.
Note
Online Only1
Your ASA 5506-X ships with either ASA or Firepower Threat Defense software preinstalled. To reimage
your device, see Reimage the Cisco ASA or Firepower Threat Defense Device.
This next-generation ASA delivers unprecedented levels of defense against threats to the network with deeper
web inspection and flow-specific analysis, improved secure connectivity via end-point security posture
About the ASA 5506-X, ASA 5506W-X, and ASA 5506H-X
validation, and voice and video over VPN support. It also provides enhanced support for intelligent information
networks through improved network integration, resiliency, and scalability.
This ASA is a smaller form-factor chassis, intended primarily for desktop or wall-mounting, although one or
two can be mounted in a single rack shelf. The ASA has a standard 1 RU chassis. See Cisco ASA 5500-X
Series Next-Generation Firewalls to compare the performance metrics and capabilities of the 5500-X ASAs.
Overview
Caution
Do not stack the ASA chassis on top of another ASA chassis. If you stack the units, they will overheat,
which causes the units to power cycle.
About the ASA 5506-X, ASA 5506W-X, and ASA 5506H-X
ASA 5506W-X Wireless Features
The ASA 5506W-X supports two high-performing spatial stream rates over a deployable distance with
high reliability when serving clients. The ASA 5506W-X contains two simultaneous dual-band radios
(2.4-GHz and 5-GHz 802.11n MIMO radios) in a controller-based mode or autonomous mode. It has
integrated internal antennas that support full inter-operability with leading 802.11n clients. The radio
hardware supports Unified, FlexConnect, and Monitor-mode.
The ASA 5506W-X has the following processor features:
128 MB NAND flash size
•
1 MB NOR flash size
•
128 MB DDR2 memory bus, x32
•
The 2.4 GHz and 5 GHz 802.11n radios have the following features:
802.11n standard compliant
•
A-MPDU TX
•
HT Duplicate Mode
•
2TX x 2RX
•
2-spatial streams, 300 Mbps PHY rate
•
Maximal ratio combining (MRC)
•
Cyclic Shift Diversity (CSD)
•
MCS0-MCS15; Short or Long Guard Intervals
•
DFS for UNII-2 and UNII-2 Extended channels, including 0.5us radar pulse detection
•
The ASA 5506W-X is configured with four single-band, inverted-F antennas (two 2.4-GHz and two
5-GHz), which are evenly spaced inside the top of the chassis. Peak gains are approximately 3 dBi in
the 2.4-GHz band and 5 dBi in the 5-GHz band.
ASA 5506H-X Features
The ASA 5506H-X is a hardened version of the 5506-X with a ruggedized chassis, power supply, SSD,
and four ports instead of eight. It is ruggedized because it supports a much wider industrial operational
temperature range (-20C to 60C), meets the harsh EMI and environmental criteria for the IEC1613 and
IEC 61850-3 power substation standards, and meets IEC60529 IP40 for ingress protection.
The ASA 5506H-X ships with a ruggedized 5V-5.3V barrel power supply that provides 22 W. Or you
can order an optional DC power supply that supplies 24V DC (part number PWR2-20W-24VDC) or
20W 20-60V DC (part number PWR2-22W-20-60VDC).
Note
Before beginning any of the procedures described in this book, be sure to read the Regulatory Compliance
and Safety Information for the Cisco ASA 5506-X series and follow proper safety procedures.
The following figure shows the package contents for the ASA 5506-X and ASA 5506W-X. Note that the
contents are subject to change and your exact contents might contain additional or fewer items.
Figure 1: ASA 5506-X and 5506W-X Package Contents
Overview
USB Console Cable (Type A to Type B)2Chassis1
Brick power supply4Power cord3
The following figure shows the package contents for the ASA 5506H-X. Note that the contents are subject
to change and your exact contents might contain additional or fewer items.
The following figure shows the front panel of the ASA 5506-X. The ASA 5506W-X has an identical front
panel. Note that there are no connectors or LEDs on the front panel.
Figure 3: 5506-X and 5506W-X Front Panel
The following figure shows the front panel of the ASA 5506H-X. Note that there are no connectors or LEDs
on the front panel.
The following figure shows the rear panel of the ASA 5506-X. The 5506W-X has an identical rear panel.
Figure 5: ASA 55-6-X and 5506W-X Rear Panel
1
2Status LEDs
The locations and meanings of the status
LEDs are described in LEDs, on page
8.
Power cord socket
The chassis power-supply socket. See
Power Supply Modules, on page 13 for
more information about the chassis
power supply.
Note
The ASA is powered on when
you plug in the AC power
supply.
3
Network data ports
Eight Gigabit Ethernet RJ-45 (8P8C)
network I/O interfaces. The ports are
numbered (from left to right) 1, 2, 3, 4,
5, 6, 7, 8. Each port includes a pair of
LEDs, one each for connection status
4
Management port
A Gigabit Ethernet interface restricted
to network management access only.
Connect with an RJ-45 cable.
and link status. The ports are named and
numbered Gigabit Ethernet 1/1 through
Gigabit Ethernet 1/8. See Network
Ports, on page 11 for additional
information.
5
6Console ports
Two serial ports, a mini USB Type B,
and a standard RJ-45 (8P8C), are
provided for management access via an
external system. See Console Ports, on
page 11 for additional information.
USB port
A standard USB Type A port is
provided that allows the attachment of
an external device, such as mass storage.
See Internal and External Flash Storage,
A small recessed button that if pressed
for longer than three seconds resets the
ASA to its default “as-shipped” state
Lock slot
The slot accepts a standard Kensington
T-bar locking mechanism for securing
the ASA.
following the next reboot. Configuration
variables are reset to factory default.
However, the flash is not erased and no
files are removed.
Note
You can use the service
sw-reset-button to disable the
reset button. The default is
enabled.
Note
Pressing the reset button on the
ASA 5506W-X does not affect
the AP configuration, but it
causes any unsaved AP
configuration to be lost,
because the system has
rebooted. After the system
reboots, if you want a default
AP configuration, use the
hw-module module wlan
recover configuration
command to recover the AP
configuration.
The following figure shows the rear panel of the 5506H-X.
The locations and meanings of the
status LEDs are described in LEDs, on
page 8.
power supply.
Note
The ASA is powered on when
you plug in the AC power
supply.
3
4Network data ports
Four Gigabit Ethernet RJ-45 (8P8C)
network I/O interfaces. The ports are
numbered (from top to bottom) 1, 2, 3,
Management port
A Gigabit Ethernet interface restricted
to network management access only.
Connect with an RJ-45 cable.
4,. Each port includes a pair of LEDs,
one each for connection status and link
status. The ports are named and
numbered Gigabit Ethernet 1/1 through
Gigabit Ethernet 1/4. See Network
Ports, on page 11 for additional
information.
5
6Console ports
Two serial ports, a standard RJ-45
(8P8C), and a mini USB Type B, are
provided for management access via
an external system. See Console Ports,
on page 11 for additional information.
USB port
A standard USB Type A port is
provided that allows the attachment of
an external device, such as mass
storage. See Internal and External Flash
Storage, on page 12 for additional
information.
LEDs
7
Reset button
A small recessed button that if pressed
for longer than three seconds resets the
ASA to its default “as-shipped” state
following the next reboot.
Configuration variables are reset to
factory default. However, the flash is
not erased and no files are removed.
Note
You can use the service
sw-reset-button to disable the
reset button. The default is
enabled.
Facing the rear of the ASA 5506-X and ASA 5506W-X chassis, the LEDs are located on the top left edge
(facing the front of the chassis, they are in the back right corner of the top). Facing the rear of the ASA
5506H-X, the LEDs are located on the bottom left of the chassis. The network port LEDs are at the top sides
of each network port. See Rear Panel, on page 6 for more information.
The following figure shows the LEDs on the top left edge.
Figure 7: LEDs
1
2Power
Power supply status:
• Unlit – Power
supply off.
• Solid green – Power
supply on.
Status
System operating status:
• Green – Normal
system function.
• Amber – Critical
alarm indicating one
or more of the
See Power Supply
Modules, on page 13 for
additional power
information specific to
your specific ASA.
Failover pair
operating normally.
The LED is green
always unless the
ASA in an HA pair.
• Amber – When the
ASA is in an HA
pair, the LED is
amber for the
Standby unit.
• Unlit – Failover is
not operational.
wLAN
Not in use on the ASA
5506-X or the ASA
5506-H.
Association status of the
wireless connection on
the ASA 5506W-X:
• Chirping green –
Normal operating
condition, but no
wireless client is
present.
• Green – Normal
operating condition,
at least one wireless
client is associated.
• Blinking amber –
Software upgrade in
progress.
Green, red, amber
•
sequence –
Discovery/join
process in progress.
• Blinking red –
Ethernet link not
operational.
• Unlit – Wireless is
not operational.
Network Port Status
On the rear panel of the ASA 5506-X and ASA 5506W-X, a pair of LEDs (link status and connection status)
for each of the eight Gigabit Ethernet network ports, and the Gigabit Ethernet management port.
On the rear panel of the ASA 5506H-X, a pair of LEDs (link status and connection status) for each of the four
Gigabit Ethernet network ports, and the Gigabit Ethernet Management port.
There are eight 10/100/1000 baseT Ethernet network ports on the ASA 5506-X and ASA 5506W-X. Each
RJ-45 (8P8C) copper port supports auto MDI/X as well as auto-negotiation for interface speed, duplex, and
other negotiated parameters, and are MDI/MDIX compliant.
In addition, the ASA 5506W-X has a Gigabit Ethernet 1/9 port that is internal and connects to the WLAN
module.
The ASA 5506H-X has four 10/100/1000 baseT Ethernet network ports. Each RJ-45 (8P8C) copper port
supports auto MDI/X as well as auto-negotiation for interface speed, duplex, and other negotiated parameters,
and are MDI/MDIX compliant.
Looking at the rear of the ASA 5506-X and ASA 5506W-X, where the ports are located, port 1 is on the left,
and port 8 is on the right, next to the console and management ports. Each port is accompanied by a pair of
LEDs, one each for link status (L) and connection status (S). The ports are named and numbered Gigabit
Ethernet 1/1 through Gigabit Ethernet 1/8. The ports are named and numbered Gigabit Ethernet 1/1 through
Gigabit Ethernet 1/4.
The four ports on the ASA 5506H-X are numbered differently. Looking at the rear of the ASA 5506H-X
where the ports are located, ports 1 and 3 are at the top from left to right. Ports 2 and 4 are on the bottom from
left to right. The ports are between the Status LEDs and the console and management ports. The ports are
named and numbered Gigabit Ethernet 1/1 through Gigabit Ethernet 1/4.
Network Ports
Console Ports
The ASA has two external console ports, a standard RJ-45 port and a Mini USB Type B serial port. Only one
console port can be active at a time. When a cable is plugged into the USB console port, the RJ-45 port
becomes inactive. Conversely, when the USB cable is removed from the USB port, the RJ-45 port becomes
active. The console ports do not have any hardware flow control. You can use the command-line interface
(CLI) to configure your ASA through either serial console port by using a terminal server or a terminal
emulation program on a computer.
In addition, the AP module inside the ASA 5506W-X has a console port, which is accessible by sessioning
to the module's console via the session wlan console command in the ASA CLI.
See Connect to a Console Terminal or PC, on page 39 for the procedure to install a console terminal.
RJ-45 Port
The RJ-45 (8P8C) port supports RS-232 signaling to an internal UART controller. The RJ-45 console
port does not support a remote dial-in modem. You can use a standard management cable (Cisco part
number 72-3383-01) to convert the RJ45-to-DB9 connection if necessary.
The Mini USB Type B port lets you connect to a USB port on an external computer. For Linux and
Macintosh systems, no special driver is required. For Windows systems, you must download and install
a USB driver (available on software.cisco.com). You can plug and unplug the USB cable from the
console port without affecting Windows HyperTerminal operations. We recommend shielded USB
cables with properly terminated shields. Baud rates for the USB console port are 1200, 2400, 4800,
9600, 19200, 38400, 57600, and 115200 bps.
Overview
Note
For Windows operating systems, you must install a Cisco Windows USB Console Driver on any PC
connected to the console port before using the USB console port. See Connect to the Console Port with
Microsoft Windows, on page 39 for information on installing the driver.
Internal and External Flash Storage
The ASA contains one internal USB flash drive, and a standard USB Type A port that you can use to attach
an external device. The USB port can provide output power of 5 volts, up to a maximum of 500 mA (5 USB
power units).
Internal USB Device
An embedded eUSB device is used as the internal flash; it is identified as disk0.
External USB Drive (Optional)
You can use the external Type A USB port to attach a data-storage device. The external USB drive
identifier is disk1. When the ASA is powered on, a connected USB drive is mounted as disk1 and is
available for you to use. Additionally, the file-system commands that are available to disk0 are also
available to disk1, including copy, format, delete, mkdir, pwd, cd, and so on.
If you insert a USB drive with more than one partition, only the first partition is mounted.
FAT-32 File System
The ASA only supports FAT-32-formatted file systems for the internal eUSB and external USB drives.
If you insert an external USB drive that is not in FAT-32 format, the system mounting process fails,
and you receive an error message. You can enter the command format disk1: to format the partition
to FAT-32 and mount the partition to disk1 again; however, data might be lost.
Solid State Drive
The ASA 5506-X and ASA 5506W-X ship with an SSD installed that provides storage support. The SSD has
50 GB of useable space and is not field-replaceable. You must return the entire ASA to Cisco for drive
replacement. The SSD is used by the software; there is no user access to the SSD.
The ASA 5506H-X ships with a ruggedized SSD installed that provides storage support. The SSD is an
industrial-rated part so that it operates over the extended temperature range that the ASA 5506H-X supports.
The SSD has 50 GB of useable space and is not field-replaceable. You must return the entire ASA to Cisco
for drive replacement. The SSD is used by the software; there is no user access to the SSD.
Power Supply Modules
The ASA 5506-X and ASA 5506W-X ship with a 12V brick power supply that provides 60 W.
The ASA 5506H-X ships with a ruggedized 5V-5.3V barrel power supply that provides 22 W. The power
supply supports an extended temperature range of -25°C to 60°C. Or you can order an optional DC power
supply that supplies 24V DC (part number PWR2-20W-24VDC) or 20W 20-60V DC (part number
PWR2-22W-20-60VDC).
Hardware Specifications
The following table contains hardware specifications for the ASA.
Power Supply Modules
Mounting
Dimensions
Weight
Desk mountable; see Desktop Mount the ASA, on page 29 for more
•
information.
Caution
Rack mountable in a rack tray. You can place two chassis side by side. See
•
Rack Mount the ASA, on page 32 for more information.
Note
Wall mountable (ASA 5506-X and ASA 5506W-X only); see Wall Mount
•
the ASA, on page 30 for more information.
DIN rail mountable (ASA 5506H-X only); the DIN rail is available for
•
order from Cisco Systems. See Install the ASA 5506H-X in a DIN Rail,
on page 34.
7.87 x 9.23 x 1.94 in (19.99 x 23.44 x 4.93 cm) including the feet (ASA 5506-X
and ASA 5506W-X).
9.1 x 9.1 x 2.8 in (23.11 x 23.11 x 7.11 cm) including the feet (ASA 5506H-X).
4 lb (ASA 5506-X and ASA 5506W-X)
6.7 lb (ASA 5506H-X)
Do not stack the ASA chassis on top of another ASA chassis.
If you stack the units, they will overheat, which causes the units
to power cycle.
One ASA 5506H-X fits in the rack tray. See Rack Mount the ASA,
Operating: 32°F to 104°F (0°C to 40°C) (ASA 5506-X and ASA 5506W-X)
-4°F to 140°F (-20°C to 60°C) (ASA 5506H-X)
Nonoperating: -13°F to 158°F (-25°C to 70°C) (ASA 5506-X and ASA 5506W-X)
-40°F to +185°F (-40° C to +85° C) (ASA 5506H-X)
Relative humidity
Operating: 90% (ASA 5506-X and ASA 5506W-X)
Operating: 95% (ASA 5506H-X)
Nonoperating: 10% to 90%
Maximum altitude
Operating: 10,000 ft (3048 m)
Nonoperating: 15,000 ft (4572 m)
IP40 per IEC60529 (ASA 5506H-X)IP rating
IEEE1613, IEC60068-2, IEC 61850-3 (ASA 5506H-X)Extended vibe and shock
1
Derate the maximum operating temperature 1.5 degrees C per 1000 ft above sea level.
2
Derate the maximum operating temperature 1.5 degrees C per 1000 ft above 6,000 feet elevation.
1
2
Power Cord Specifications
This section applies only to the ASA 5506-X and ASA 5506W-X. It does NOT apply to the ASA 5506H-X.Note
Each power supply has a separate power cord. Standard power cords are available for connection to the security
appliance.
If you do not order the optional power cord with the system, you are responsible for selecting the appropriate
power cord for the product. Using a non-compatible power cord with this product may result in electrical
safety hazard. Orders delivered to Argentina, Brazil, and Japan must have the appropriate power cord ordered
with the system.
Only the approved power cords provided with the security appliance are supported. The following table lists
the supported power cords.
This chapter prepares you to install your ASA, and contains the following sections:
Installation Warnings, page 23
•
Position the ASA, page 24
•
Mount and Deployment Preparation for the ASA 5506W-X, page 25
•
Safety Recommendations, page 25
•
Site Environment , page 26
•
Installation Warnings
Be sure to read the Regulatory Compliance and Safety Information document before installing the ASA.
Take note of the following warnings:
CHAPTER 2
Read the installation instructions before connecting the system to the power source.Warning
Warning
Warning
Warning
Online Only23
Before working on a chassis or working near power supplies, unplug the power cord on AC units; disconnect
the power at the circuit breaker on DC units.
Before working on equipment that is connected to power lines, remove jewelry (including rings, necklaces,
and watches). Metal objects will heat up when connected to power and ground and can cause serious burns
or weld the metal object to the terminals.
During this procedure, wear grounding wrist straps to avoid ESD damage to the card. Do not directly
touch the backplane with your hand or any metal tool, or you could shock yourself.
This product requires short-circuit (overcurrent) protection to be provided as part of the building installation.
Install only in accordance with national and local wiring regulations.
To avoid electric shock, do not connect safety extra-low voltage (SELV) circuits to telephone-network
voltage (TNV) circuits. LAN ports contain SELV circuits, and WAN ports contain TNV circuits. Some
LAN and WAN ports both use RJ-45 connectors. Use caution when connecting cables.
This equipment must be grounded. Never defeat the ground conductor or operate the equipment in the
absence of a suitably installed ground conductor. Contact the appropriate electrical inspection authority
or an electrician if you are uncertain that suitable grounding is available.
Ultimate disposal of this product should be handled according to all national laws and regulations.Warning
Installation of the equipment must comply with local and national electrical codes.Warning
The device is designed to work with TN power systems.Warning
Position the ASA
Whether positioning the ASA on a desktop, on a non-rack closet shelf, or mounting it on a wall, consider the
following:
Caution
Do not stack the ASA chassis on top of another ASA chassis. If you stack the units, they will overheat,
which causes the units to power cycle.
Mount and Deployment Preparation for the ASA 5506W-X
Be sure to choose an area where the ASA is out of the way to make sure it is not bumped or accidentally
•
dislodged. The appliance has “feet” on the bottom so it does not sit flush where placed, thus allowing
proper air circulation through and around it. Make sure that the appliance is not tightly enclosed or
crowded by other objects that might impede proper circulation.
Choose a location that lets you easily bring the power cord and Ethernet and console cables to the ASA,
•
with plenty of slack and yet tucked away, so they cannot be inadvertently unplugged.
Mount and Deployment Preparation for the ASA 5506W-X
Before you mount and deploy the ASA 5506W-X, we recommend that you perform a site survey (or use the
site planning tool) to determine the best location to install your wireless ASA.
Make sure you have the following information about your wireless network available:
ASA 5506W-X locations
•
ASA 5506W-X mounting options (see Position the ASA, on page 24 for mounting options)
•
ASA 5506W-X power options
•
Note
We recommend that you make a site map showing the ASA 5506W-X locations so you can record the
device MAC addresses from each location and provide them to the person who is planning or manage
your wireless network.
Safety Recommendations
Use the information in the following sections to help ensure your safety and to protect the chassis. This
information may not address all potentially hazardous situations in your working environment, so be alert and
exercise good judgment at all times.
Observe these safety guidelines:
Keep the area clear and dust-free before, during, and after installation.
•
Keep tools away from walkways, where you and others might trip over them.
•
Do not wear loose clothing or jewelry, such as earrings, bracelets, or chains that could get caught in the
•
chassis.
Wear safety glasses if you are working under any conditions that might be hazardous to your eyes.
•
Do not perform any action that creates a potential hazard to people or makes the equipment unsafe.
•
Never attempt to lift an object that is too heavy for one person.
Before working on a chassis, be sure the power cord is unplugged.Warning
Follow these guidelines when working on equipment powered by electricity:
Before beginning procedures that require access to the interior of the chassis, locate the emergency
•
power-off switch for the room in which you are working. Then, if an electrical accident occurs, you can
act quickly to turn off the power.
Do not work alone if potentially hazardous conditions exist anywhere in your work space.
•
Never assume that power is disconnected; always check.
•
Look carefully for possible hazards in your work area, such as moist floors, ungrounded power extension
•
cables, frayed power cords, and missing safety grounds.
If an electrical accident occurs:
•
Installation Preparation
Use caution; do not become a victim yourself.
◦
Disconnect power from the system.
◦
If possible, send another person to get medical aid. Otherwise, assess the condition of the victim,
◦
and then call for help.
Determine whether the person needs rescue breathing or external cardiac compressions; then take
◦
appropriate action.
Use the chassis within its marked electrical ratings and product usage instructions.
•
Prevent Electrostatic Discharge Damage
Electrostatic discharge (ESD) occurs when electronic components are improperly handled, and it can damage
equipment and impair electrical circuitry, resulting in intermittent or complete failure.
Always follow ESD-prevention procedures when removing and replacing components. Ensure that the chassis
is electrically connected to an earth ground. Wear an ESD-preventive wrist strap, ensuring that it makes good
skin contact. Connect the grounding clip to an unpainted surface of the chassis frame to safely ground ESD
voltages. To properly guard against ESD damage and shocks, the wrist strap and cord must operate effectively.
If no wrist strap is available, ground yourself by touching the metal part of the chassis.
For safety, periodically check the resistance value of the antistatic strap, which should be between one and
10 megohms.
Site Environment
You can place the chassis on a desktop, mount it on a wall, or on a rack shelf. The location of the chassis and
the layout of the equipment rack or wiring room are extremely important for proper system operation. Placing
equipment too close together with inadequate ventilation and inaccessible panels can cause system malfunctions
and shutdowns. Improper placement can also make it difficult for you to access the chassis for maintenance.
Under no circumstances should you stack more than one chassis on top of one another. This disrupts
cooling air flow to the ASAs and causes damage to the hardware.
See Hardware Specifications, on page 13 for information about physical specifications.
When planning the site layout and equipment locations, consider the information in the next section to help
avoid equipment failures and reduce the possibility of environmentally caused shutdowns. If you are currently
experiencing shutdowns or unusually high error rates with your existing equipment, these considerations may
help you isolate the cause of failures and prevent future problems.
Site Considerations
Considering the following helps you plan an acceptable operating environment for the chassis, and avoid
environmentally caused equipment failures.
Electrical equipment generates heat. Ambient air temperature might not be adequate to cool equipment
•
to acceptable operating temperatures without adequate circulation. Ensure that the room in which you
operate your system has adequate air circulation.
Ensure that the chassis cover is secure. The chassis is designed to allow cooling air to flow effectively
•
within it. An open chassis allows air leaks, which may interrupt and redirect the flow of cooling air from
the internal components.
Always follow the ESD-prevention procedures described previously to avoid damage to equipment.
•
Damage from static discharge can cause immediate or intermittent equipment failure.
Power Supply Considerations
When installing the chassis, consider the following:
• Check the power at the site before installing the chassis to ensure that it is “clean” (free of spikes and
noise). Install a power conditioner, if necessary, to ensure proper voltages and power levels in the
appliance input voltage.
Install proper grounding for the site to avoid damage from lightning and power surges.
•
The chassis does not have a user-selectable operating range. Refer to the label on the chassis for the
•
correct appliance input-power requirement.
Install an uninterruptible power source for your site, if possible.
•
Equipment Rack Configuration Considerations
Consider the following when planning an equipment-rack configuration:
If you are mounting a chassis in an open rack, make sure that the rack frame does not block the intake
Be sure enclosed racks have adequate ventilation. Make sure that the rack is not overly congested as
•
each chassis generates heat. An enclosed rack should have louvered sides and a fan to provide cooling
air.
In an enclosed rack with a ventilation fan in the top, heat generated by equipment near the bottom of
•
the rack can be drawn upward and into the intake ports of the equipment above it in the rack. Ensure
that you provide adequate ventilation for equipment at the bottom of the rack.
Baffles can help to isolate exhaust air from intake air, which also helps to draw cooling air through the
•
chassis. The best placement of the baffles depends on the airflow patterns in the rack. Experiment with
different arrangements to position the baffles effectively.
Do not remove the rubber feet included with the ASA because they are needed for proper cooling for all
mounting orientations.
This chapter describes how to rack-mount the ASA, and how to connect the cords and cables. It contains the
following sections:
Desktop Mount the ASA, page 29
•
Wall Mount the ASA, page 30
•
Rack Mount the ASA, page 32
•
Install the ASA 5506H-X in a DIN Rail, page 34
•
Connect Cables, Turn on Power, and Verify Connectivity, page 37
•
Connect to a Console Terminal or PC, page 39
•
Desktop Mount the ASA
You can mount the ASA on a desktop by placing it on a desk in a horizontal position. Make sure there are no
blockages or obstructions within one inch of the top of the ASA or within .5 inch of the sides and back, so
that nothing interferes with cooling. Do not remove the rubber feet included with the ASA. They are also
needed for proper cooling.
Do not stack the ASA chassis on top of another ASA chassis. If you stack the units, they will overheat,
which causes the units to power cycle.
Wall Mount the ASA
Follow these steps to mount your ASA on a wall. You can purchase a wall mount kit. The part number for
the wall mount kit is ASA5506-WALL-MNT= .
Step 1
Step 2
Step 3
Choose a location on the desired wall for the ASA.
Use the two Cisco-provided screws and anchors from the optional wall-mount kit.
If you are mounting the ASA onto something other than drywall, such as wood or sheet metal, anchors may not be
required.
Use a pencil, ruler, and level to mark locations for the two mounting screws.
The width and length of the ASA are 7.87 x 9.23 inches ( 20 x 23.44 cm). The mounting holes in the chassis are in the
middle length-wise (that is, 6.372 inches from front and back), while the holes are inset from the opposite edges 0.75
inches (1.9 cm).
Thus, you need to make two level marks 6.37, or approximately 6-3/8, inches (16.18 cm) apart.
Drill a hole into the wall at each mark.
These holes should be slightly smaller in diameter than your anchors. The recommended drill hole size is 3/16".
Insert the anchors into the holes and be sure they are properly seated.
Fasten each screw into its anchor until it protrudes about 1/4 inch.
Pick up the ASA, align the screws in the anchors with the holes in the bottom of the chassis, move the ASA toward the
wall until the screw heads are in the chassis, and then slide the ASA down until it rests on the screws.
You can only mount the chassis with the front panel oriented toward either the ceiling or the floor. Wall mounting in
other orientation is not supported.
What to Do Next
You can now install the cables and power cord, as described in Connect Cables, Turn on Power, and Verify
Connectivity, on page 37.
Rack Mount the ASA
Follow these steps to mount the ASA to a rack-mount shelf.
You mount only one ASA 5506H-X in the rack-mount shelf.
The dimensions of the ASA 5506H-X are 3.46 in. x 18.3 in. x 19.5 in. (8.79 cm x 46.48 cm x 49.52 cm).
The PID is asa5506h-rack-mnt=.
Place the ASA upside down on a large, stable work area. If you are installing two ASAs in the shelf, place the second
ASA beside the first, also upside down.
Invert the sliding trays and position the ASA(s) on top of them such that the front of the device(s) and the front of the
tray are in the same direction.
Adjust the position of the first ASA and the tray until the three mounting holes in the dimples in the bottom of the shelf
are aligned with the mounting holes in the bottom of the ASA.
Tighten the captive tray screws into the shelf to lock it into place.
Figure 23: ASA 5506-X and ASA 5506W-X in the Rack-Mount Shelf
Carefully turn the tray right-side up and slide it into the rack-mounted shelf.
What to Do Next
You can now install the cables and power cord, as described in Connect Cables, Turn on Power, and Verify
Connectivity, on page 37.
Install the ASA 5506H-X in a DIN Rail
You can use the 7.5-mm thick 45mm wide top hat DIN rail for the ASA 5506H-X. Secure the DIN rail to the
mounting surface approximately every 7.8 inches (200 mm) and use end-anchors appropriately.
We recommend that you install the ASA 5506H-X on a steel DIN rail for extra stability.Note
Locate the plastic tab on the end of the DIN rail bracket that extends past the chassis. Press the tab in and slide the plastic
latch piece out while the tab is pressed down to put it into the locked position.
Turn the chassis sideways so that the power connector is near the top.
Position the rear edge of the chassis directly in front of the DIN rail making sure that the DIN rail fits in the space between
the plastic latch and the metal hook.
Position the chassis so that the hook on the DIN rail bracket hooks onto the top edge of the DIN rail. The weight of the
chassis can rest on the hook temporarily while the DIN rail bracket latches are secured.
Push the DIN rail bracket latch up when the chassis is over the DIN rail to secure it. This snaps the latch into the closed
position which locks it onto the DIN rail.
Figure 26: ASA 5506H-X Installed with the DIN Rail
Connect Cables, Turn on Power, and Verify Connectivity
The chassis is now installed in the DIN rail.
What to Do Next
See Connect Cables, Turn on Power, and Verify Connectivity, on page 37 to finish setting up your ASA.
Connect Cables, Turn on Power, and Verify Connectivity
After positioning or mounting the ASA, follow these steps to connect cables, turn on power, and verify
connectivity:
Step 1
Connect the network cables:
a)
Management interface – Using this Management 1/1 Gigabit Ethernet port, you can connect a management computer
directly with an Ethernet cable, or you can connect the computer and the ASA to the same management network. Be
sure the PC is configured to obtain an IP address using DHCP.
You can configure any of the Gigabit Ethernet interfaces to be a management-only interface using the
management-only command. However, you cannot disable management-only mode on the Management 1/1 interface.
The following figure shows how to connect the network cables.
Connect Cables, Turn on Power, and Verify Connectivity
Management 1/1 interface (RJ-45)3
Figure 28: ASA 5506H-X Cabling
Mount and Connect
Console port (RJ-45 or Mini USB Type B)2Gigabit Ethernet data interface (RJ-45)1
Management 1/1 interface (RJ-45)3
b)
(Optional) Console port – For use with the CLI. Connect a computer or terminal server using a serial console cable
to either the RJ-45 or Mini USB Type B port.
Only one console port can be active at a time. When a cable is plugged into the USB console port, the RJ-45 port
becomes inactive. Conversely, when the USB cable is removed from the Mini USB Type B port, the RJ-45 port
becomes active. See Connect to a Console Terminal or PC, on page 39 for specific instructions for connecting the
console port.
c)
Gigabit Ethernet ports – For the network interfaces; use standard RJ-45 Ethernet cables.
Step 2
Connect the power cord to the ASA, and plug the other end to your power source.
Note
The ASA 5506-X, 5506W-X, and ASA 5506H-X do not have an on/off switch; the device powers on when you
plug it into a power source.
Console port (RJ-45 or Mini USB Type B)2Gigabit Ethernet data interface (RJ-45)1
Page 43
Mount and Connect
Connect to a Console Terminal or PC
Step 3
Step 4
Check the Status LED on the ASA chassis.
When it is solid green, the ASA has passed power-on diagnostics.
See the Cisco ASA 5506-X Series Quick Start Guide to continue setting up your ASA.
Note
Your ASA ships with either ASA or Firepower Threat Defense software preinstalled. To reimage your device,
see Reimage the Cisco ASA or Firepower Threat Defense Device.
Connect to a Console Terminal or PC
The serial ports provide administrative access to the ASA either with a console terminal or a PC. To configure
the ASA through the CLI, you must establish a connection between the ASA console port and either a terminal
or a PC.
This section describes how to connect to a console terminal or a PC, and contains the following topics:
Connect to the Console Port with Microsoft Windows
You must install a USB device driver the first time a Microsoft Windows-based PC is connected to the USB
serial port on the ASA, otherwise the connection fails.
To uninstall the driver, use the Add Remove Programs utility or the Setup-exe program.
Connect to the Console Port with Microsoft Windows
Disconnect the ASA console terminal before uninstalling the driver.Note
Mount and Connect
Step 1
Step 2
Step 3
Obtain the appropriate driver (Cisco_usbconsole_driver_X_X_zip, where X is a revision number) for your ASA model
from the Cisco Download Software site, USB Console Software category.
Install the driver.
Connect a USB 5-pin Mini USB Type B to the USB console port as shown in the following figure.
Figure 29: ASA 5506-X and ASA 5506W-X Console Port Connection
Connect to the Console Port with Microsoft Windows
USB Type A3
Step 4
Connect the end of the cable with the DB-9 connector (or USB Type A) to the terminal or PC. If your terminal or PC
has a console port that does not accommodate a DB-9 connector, you must provide an appropriate adapter for that port.
The LED for the console port turns green and within a few moments the Found New Hardware Wizard appears.
Step 5
Step 6
Follow the instructions to complete the driver installation.
To communicate with the ASA, start a terminal emulator application. This software should be configured with the
following parameters:
9600 baud
•
8 data bits
•
no parity
•
1 stop bit
•
no flow control
•
Mount and Connect
Connect to the Console Port with Mac OS X
Follow these steps to connect a Mac OS X system USB port to the console using the built in OS X Terminal
utility, or alternatively you can use a separate terminal emulator application.
Step 1
Step 2
Step 3
Step 4
Step 5
Use the Finder to go to Applications > Utilities > Terminal.
Connect the OS X USB port to the ASA.
Enter the following commands to find the OS X USB port number:
Example:
macbook:user$ cd /dev
macbook:user$ ls -ltr /dev/*usb*
crw-rw-rw- 1 root wheel 9, 66 Apr 1 16:46 tty.usbmodem1a21
DT-macbook:dev user$
Connect to the USB port with the following command followed by the ASA USB port speed:
Example:
macbook:user$ screen /dev/tty.usbmodem1a21 9600
Enter Ctrl-z followed by Ctrl-\ to disconnect the OS X USB console from the Terminal window.
This chapter contains procedures for maintaining and upgrading your ASA, and contains the following
sections:
Connect the DC Adapter for the 5506H-X, page 45
•
Install the Adjustable Power Supply Retainer, page 47
•
Connect the DC Adapter for the 5506H-X
You can order an optional DC power supply that supplies 24V DC (part number PWR2-20W-24VDC) or
20W 20-60V DC (part number PWR2-22W-20-60VDC).
Step 1
Warning
Warning
Connect the black and white lead wires to a 12 VDC source.
This product relies on the building's installation for short-circuit (overcurrent) protection. Ensure that the
protective device is rated not greater than 36 VDC, 5A. Statement 1005
This product requires short-circuit (overcurrent) protection to be provided as part of the building installation.
Install only in accordance with national and local wiring regulations.
The device is designed to work with TN power systems.Warning
To connect the DC power on your 5506H-X, follow these steps:
The black lead is negative or ground and the white lead is positive. The output cable is 1.3 meters and the input cable is
1 meter in length.
Figure 31: DC Power Adapter
Step 2
Step 3
White wire (positive)2Black wire (negative)1
Adapter3
Plug the adapter cord into the ASA.
Note
The power adapters have 18 AWG wires for the input connection. Tinned bare wires are used for the input
connection because there is no standard established for connector type. Screw terminal blocks are most often
used.
Power on the ASA and check that it has power. See LEDs, on page 8 for information on the power LED.
You can install an adjustable power supply retainer for the Delta and LiteOn power supplies in the rack-mount
tray. The bracket kit contains the bracket, 2 M3 screws, and washers. The following figure shows the adjustable
retainer.
Figure 32: ASA Bracket Assembly
Step 1
Step 2
1
from high to low bracket
Slide the rack-mount shelf containing the ASA(s) out of the rack.
At the back of the rack-mount shelf behind the power supplies, install the adjustable retainer.
a) Loosen the 2 top screws (item 1 in the figure above) slightly to adjust the bracket for each power supply.
The Delta power supply uses the bracket extended to its tallest configuration. This configuration has item 1 shifted
to the bottom of the slot on the bracket over the power supply. The LiteOn power supply uses the bracket extended
to its shortest configuration. This configuration has item 1 shifted to the top of the slot on the bracket over the power
supply.
b) Install the bracket over the power supply and screw the 2 bottom M3 captive screws (item 2 in the figure above) on
each side of the bottom of the bracket into the rack-mount tray.