Cisco ASA 5505 Adaptive Security Appliance Hardware Installation Guide Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
C O N T E N T S About This Guide v Document Objectives Audience v v Document Organization v Document Conventions vi Installation Warnings vi Where to Find Safety and Warning Information x Obtaining Documentation and Submitting a Service Request CHAPTER 1 Overview 1-x 1-1 Product Overview 1-1 Memory Requirements 1-3 Memory Requirements for the Software Version 8.
Contents Rack-Mounting the Chassis 3-7 Installing and Wall-Mounting the Cisco ASA 5505 FIPS Enclosure CHAPTER 4 Maintenance and Upgrade Procedures 4-1 Removing and Replacing the Chassis Cover Working in an ESD Environment 4-1 Removing the Chassis Cover 4-2 Replacing the Chassis Cover 4-3 Replacing the Lithium Battery 4-4 Upgrading Memory 4-6 Removing the DIMM 4-7 Installing the DIMM 4-8 Verifying the Memory Upgrade 1 Cable Pinouts 4-9 1-1 10/100/1000BaseT Connectors Console Port (RJ-45) RJ-45 to
About This Guide This preface includes the following sections: • Document Objectives, page v • Audience, page v • Document Organization, page v • Document Conventions, page vi • Installation Warnings, page vi • Obtaining Documentation and Submitting a Service Request, page x Document Objectives This guide describes how to perform installation and maintenance procedures on the Cisco ASA 5505 Adaptive Security Appliance.
About This Guide • Chapter 4, “Maintenance and Upgrade Procedures,” describes the adaptive security appliance maintenance and upgrade procedures. • Appendix 1, “Cable Pinouts,” describes the cable pinouts. Document Conventions Command descriptions use these conventions: • Braces ({ }) indicate a required choice. • Square brackets ([ ]) indicate optional elements. • Vertical bars (|) separate alternative, mutually exclusive elements.
About This Guide • Blank Faceplates and Cover Panels Warning, page viii • Product Disposal Warning, page viii • Short-Circuit Protection Warning, page ix • Compliance with Local and National Electrical Codes Warning, page ix • DC Power Connection Warning, page ix • AC Power Disconnection Warning, page ix • TN Power Warning, page ix • 48 VDC Power System, page ix • Multiple Power Cord, page ix • Circuit Breaker (15A) Warning, page ix • Grounded Equipment Warning, page x • Safety Cover
About This Guide Chassis Warning for Rack-Mounting and Servicing Warning To prevent bodily injury when mounting or servicing this unit in a rack, you must take special precautions to ensure that the system remains stable. The following guidelines are provided to ensure your safety: This unit should be mounted at the bottom of the rack if it is the only unit in the rack.
About This Guide Short-Circuit Protection Warning Warning This product requires short-circuit (overcurrent) protection, to be provided as part of the building installation. Install only in accordance with national and local wiring regulations. Statement 1045 Compliance with Local and National Electrical Codes Warning Warning Installation of the equipment must comply with local and national electrical codes.
About This Guide Obtaining Documentation and Submitting a Service Request Grounded Equipment Warning Warning This equipment is intended to be grounded. Ensure that the host is connected to earth ground during normal use. Statement 39 Safety Cover Requirement Warning The safety cover is an integral part of the product. Do not operate the unit without the safety cover installed.
CH A P T E R 1 Overview Read through the entire guide before beginning any of the procedures in this book. Warning Only trained and qualified personnel should install, replace, or service this equipment. Statement 49 Caution Read the safety warnings in the Regulatory Compliance and Safety Information for the Cisco ASA 5500 Series and follow proper safety procedures when performing these steps.
Chapter 1 Overview Product Overview Figure 1-1 Front Panel LEDs and Ports 3 4 LINK/ACT 5 Power 6 Status 7 Active 8 VPN SSC 100 MBPS 1 2 3 4 5 6 7 Cisco ASA 5505 Series Adaptive Security Appliance 1 153644 0 0 2 1 USB 2.0 interface 5 Status 2 100 Mbps 6 Active 3 LINK/ACT LEDs 7 VPN 4 Power 8 SSC Figure 1-2 shows the rear panel LEDs and Ports.
Chapter 1 Overview Memory Requirements Memory Requirements The default DRAM memory is 256MB and the default internal flash memory is 128MB for the Cisco ASA 5505. In a failover configuration, the two units must have the same hardware configuration They must be the same model, have the same number and types of interfaces, and the same amount of RAM. Note The two units do not have to have the same size Flash memory.
Chapter 1 Overview Memory Requirements Cisco ASA 5505 Adaptive Security Appliance Hardware Installation Guide 1-4 OL-18362-01
CH A P T E R 2 Preparing for Installation The information in this guide applies to the Cisco ASA 5505 In this guide, references to “adaptive security appliance” or security appliance apply to the Cisco ASA 5505 chassis unless specifically noted otherwise.
Chapter 2 Preparing for Installation Safety Recommendations The safety guidelines are as follows: • Keep the chassis area clear and dust-free before, during and after installation. • Keep tools away from walk areas where you and others could fall over them. • Do not wear loose clothing or jewelry, such as earrings, bracelets, or chains, that could get caught in the chassis. • Wear safety glasses if you are working under any conditions that might be hazardous to your eyes.
Chapter 2 Preparing for Installation General Site Requirements Preventing Electrostatic Discharge Damage Electrostatic discharge (ESD) can damage equipment and impair electrical circuitry. ESD damage occurs when electronic components are improperly handled and can result in complete or intermittent failures. • Always follow ESD-prevention procedures when removing and replacing components. Ensure that the chassis is electrically connected to earth ground.
Chapter 2 Preparing for Installation General Site Requirements • Electrical equipment generates heat. Ambient air temperature might not be adequate to cool equipment to acceptable operating temperatures without adequate circulation. Ensure that the room in which you operate your system has adequate air circulation. • Always follow the ESD-prevention procedures described previously to avoid damage to equipment. Damage from static discharge can cause immediate or intermittent equipment failure.
CH A P T E R 3 Installing the Cisco ASA 5505 Installing the Chassis This section contains the following topics: • Connecting the Interface Cables, page 3-1 • Powering on the Cisco ASA 5505, page 3-3 • Installing a Cable Lock, page 3-4 • Rack or Wall Mounting the Cisco ASA 5505, page 3-4 Connecting the Interface Cables This section describes how to connect the cables to the Ethernet and Console ports. Warning Only trained and qualified personnel should install, replace, or service this equipment.
Chapter 3 Installing the Cisco ASA 5505 Connecting the Interface Cables a. Step 1 Connect Port 0, the outside Ethernet port, to the public network, that is, the Internet: Note Step 2 Ethernet ports By default, switch port 0/0 is the outside port. If needed you can change the inside and outside ports assignments later. Connect your network devices with an Ethernet cable to one of the inside ports (numbered 1 through 7).
Chapter 3 Installing the Cisco ASA 5505 Powering on the Cisco ASA 5505 Console port b. You can access the command line for administration using the console port on theCisco ASA 5505. To connect to the console port and run a serial terminal emulator on a PC or workstation, perform the following steps: Step 1 Plug one end of the PC terminal adapter into a standard 9-pin PC serial port on your PC. Step 2 Plug one end of the blue console cable into the PC terminal adapter.
Chapter 3 Installing the Cisco ASA 5505 Installing a Cable Lock Note The light will be solid green, only for 100Mbps devices. Installing a Cable Lock The Cisco ASA 5505 includes a slot that accepts standard desktop cable locks to provide physical security. The cable lock is not included. To install a cable lock, perform the following steps: Step 1 Follow the directions from the manufacturer for attaching the other end of the cable for securing the Cisco ASA 5505.
Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mounting the Cisco ASA 5505 Mounting the Chassis You can wall-mount or rack-mount the adaptive security appliance. The part number for ordering a wall-mount kit for the adaptive security appliance is ASA-5505-WALL-MNT= , the part number for ordering a rack-mount kit for the adaptive security appliance is ASA5505-RACK-MNT= .
Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mounting the Cisco ASA 5505 Step 6 Remove the three screws from the bottom of the adaptive security appliance as shown in Figure 3-13. Discard these screws as you will not need them. Step 7 Place the wall-mount bracket on the adaptive security appliance. Use the three screws provided in the accessory kit to screw the wall-mount bracket to the adaptive security appliance as shown in Figure 3-13.
Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mounting the Cisco ASA 5505 Step 9 Allowing the screws in the anchors to go through the holes in the brackets, mount and slide down the adaptive security appliance. Figure 3-5 Mounting the Cisco ASA 5505 Chassis 190683 1 1 Step 10 Screws Connect the interface cables. For information on installing the cables, see the “Connecting the Interface Cables” section.
Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mounting the Cisco ASA 5505 Place the wall-mount bracket with the adaptive security appliance attached to it on the rack mount tray as shown in Figure 3-6.
Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mounting the Cisco ASA 5505 Step 5 Screw in the security bracket to the front of the rack mount as shown in Figure 3-7, to hold it in place.
Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mounting the Cisco ASA 5505 Step 6 Attach the rack-mount tray to the rack using the supplied screws, as shown in Figure 3-8.
Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mounting the Cisco ASA 5505 Installing and Wall-Mounting the Cisco ASA 5505 FIPS Enclosure Figure 3-9 shows the FIPS enclosure for the Cisco ASA 5505. FIPS Enclosure 272363 Figure 3-9 To install and wall-mount the Cisco ASA 5505 FIPS enclosure, perform the following steps: Step 1 Choose a wall where you would like to mount the Cisco ASA 5505.
Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mounting the Cisco ASA 5505 Figure 3-10 Bottom View of the FIPS Enclosure 1 1 2 3 3 2 2 272365 2 1 1 M3 x 12 screws 2 Plastic anchors 3 Plastic anchors for vertical mounting (optional) Step 3 Drill a hole on the wall at each mark you made for the location for the plastic anchors. Step 4 Press the four plastic anchors into the holes. Step 5 Screw the four screws provided in the accessory kit into the anchors, but not all the way.
Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mounting the Cisco ASA 5505 Step 7 Remove the three screws from the bottom of the Cisco ASA 5505 as shown in Figure 3-12. Removing the Screws 250575 Figure 3-12 Slide the ASA 5540 into the FIPS enclosure as shown in Figure 3-13.
Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mounting the Cisco ASA 5505 Tamper Evident Label Applied Over the Screw 250578 Figure 3-14 1 1 Step 11 Tamper label The third tamper evident label should be placed so that the one half of the tamper evident label covers the enclosure and the other half covers the Cisco ASA 5505 chassis as shown in Figure 3-15.
Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mounting the Cisco ASA 5505 Step 12 Pick up the Cisco ASA 5505 with the FIPS enclosure facing the wall, align the screws in the anchors with the holes in the enclosure. Step 13 Allowing the screws in the anchors to go through the holes in the enclosure, mount and slide down the Cisco ASA 5505 as shown in Figure 3-16. Mounting the Cisco ASA 5505 Chassis 1 272361 272361 Figure 3-16 1 Step 14 Screws Connect the interface cables.
Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mounting the Cisco ASA 5505 Cisco ASA 5505 Adaptive Security Appliance Hardware Installation Guide 3-16 OL-18362-01
CH A P T E R 4 Maintenance and Upgrade Procedures This chapter describes how to install the chassis on the wall or rack, remove and replace the chassis cover, the power supply, and the CompactFlash.
Chapter 4 Maintenance and Upgrade Procedures Removing and Replacing the Chassis Cover Removing the Chassis Cover To remove the chassis cover, perform the following steps: Note Removing the chassis cover does not affect Cisco warranty. Upgrading the adaptive security appliance does not require any special tools and does not create any radio frequency leaks. Step 1 Read the Regulatory Compliance and Safety Information for the Cisco ASA 5500 Series document.
Chapter 4 Maintenance and Upgrade Procedures Replacing the Lithium Battery Replacing the Chassis Cover Caution Do not operate the adaptive security appliance without the chassis cover installed. The chassis cover protects the internal components, prevents electrical shorts, and provides proper air-flow for cooling the electronic components.
Chapter 4 Maintenance and Upgrade Procedures Installing and Replacing the SSC Figure 4-2 Cisco ASA 5505 Lithium Battery Location 2 1 191733 Se c Se urity r Ca vice rd s Slo t 2 Co 1 ns 0 ole 1 2 RE SE T 1 Battery 2 Metal clip Step 3 Place the used battery aside. Step 4 Replace the battery with a compactible Lithium CR-2032 battery (which is available at your local electronics or drug store), by sliding the metal clip back and sliding the battery into place.
Chapter 4 Maintenance and Upgrade Procedures Installing and Replacing the SSC Table 4-1 describes the SSC LEDs. Table 4-1 1 SSC LEDs LED Color State Description STATUS Green Flashing The system is booting. Solid The system has passed power-up diagnostics. Installing an SSC To install a new SSC for the first time, perform the following steps: Step 1 Power off the adaptive security appliance.
Chapter 4 Maintenance and Upgrade Procedures Upgrading Memory Replacing an SSC To replace an existing SSC, perform the following steps: Step 1 Enter the hw-mod mod 1 shut command in privileged EXEC mode. Verify if the module is down by checking the LEDs. Step 2 Locate the grounding strap from the accessory kit and fasten it to your wrist so that it contacts your bare skin. Attach the other end to the chassis. Step 3 Remove the two screws (as shown in Figure 4-4) at the left rear end of the chassis.
Chapter 4 Maintenance and Upgrade Procedures Upgrading Memory This section describes how to remove and install the memory module on the adaptive security appliance. This section includes the following topics: • Removing the DIMM, page 4-7 • Installing the DIMM, page 4-8 Removing the DIMM To remove the memory module, perform the following steps: Step 1 Determine the location of the memory sockets, see Figure 6.
Chapter 4 Maintenance and Upgrade Procedures Upgrading Memory To prevent ESD damage, handle DIMMs as shown in Figure 7. Handling a DIMM 33115 Figure 7 Step 3 Pull the latches away from the DIMM at both ends. See Figure 8. Step 4 When both ends of the DIMM are released from the socket, grasp the ends of the DIMM with your thumb and forefinger and pull the DIMM completely out of the socket.
Chapter 4 Maintenance and Upgrade Procedures Upgrading Memory Figure 9 Inserting the DIMM 1 2 242881 2 Caution When inserting DIMMs, use firm but not excessive pressure. You can cause damage to the socket. When you finish installing new memory, replace the chassis cover. Verifying the Memory Upgrade You can verify that the memory upgrade has been completed successfully by entering the show version command: hostname# show version Cisco Adaptive Security Appliance Software Version 8.
Chapter 4 Maintenance and Upgrade Procedures Upgrading Memory Cisco ASA 5505 Adaptive Security Appliance Hardware Installation Guide 4-10 OL-18362-01
A P P E N D I X 1 Cable Pinouts This appendix describes pinout information for 10/100/1000BaseT ports, console and the RJ-45 to DB-9 ports, and the Management 10/100/1000 Ethernet port, and includes the following sections: • 10/100/1000BaseT Connectors, page 1-1 • Console Port (RJ-45), page 1-2 • RJ-45 to DB-9, page 1-4 • MGMT 10/100/1000 Ethernet Port, page 1-4 • Gigabit and Fibre Channel Ports, page 1-5 10/100/1000BaseT Connectors The adaptive security appliance supports 10/100/1000BaseT ports
Appendix 1 Cable Pinouts Console Port (RJ-45) Figure 1-2 shows the 10BaseT, 100BaseTX, and 1000BASE-T connector (RJ-45). 10/100/1000 Port Pinouts Pin Label 1 TP0+ 2 TP0- 3 TP1+ 4 TP2+ 5 TP2- 6 TP1- 7 TP3+ 8 TP3- 1 2 3 4 5 6 7 8 60915 Figure 1-2 Console Port (RJ-45) Cisco products use the following types of RJ-45 cables: Note • Straight-through • Crossover Cisco does not provide these cables; they are widely available from other sources. Figure 1-3 shows the RJ 45 cable.
Appendix 1 Cable Pinouts Console Port (RJ-45) To identify the RJ-45 cable type, hold the two ends of the cable next to each other so that you can see the colored wires inside the ends, as shown in Figure 1-4. RJ-45 Cable Identification H5663 Figure 1-4 Examine the sequence of colored wires to determine the type of RJ-45 cable, as follows: • Straight-through—The colored wires are in the same sequence at both ends of the cable.
Appendix 1 Cable Pinouts RJ-45 to DB-9 RJ-45 to DB-9 Table 1-2 lists the cable pinouts for RJ-45 to DB-9 or DB-25. Table 1-2 Cable Pinouts for RJ-45 to DB-9 or DB-25 Signal RJ-45 Pin DB-9 Pin RTS 8 8 DTR 7 6 TxD 6 2 GND 5 5 GND 4 5 RxD 3 3 DSR 2 4 CTS 1 7 MGMT 10/100/1000 Ethernet Port The MGMT 10/100/1000 Ethernet port is an Ethernet port with an RJ-45 connector.
Appendix 1 Cable Pinouts Gigabit and Fibre Channel Ports Gigabit and Fibre Channel Ports Table 1-4 lists the types of SFP modules and connectors used in the adaptive security appliance. Table 1-4 Port Types of SFP Modules and Connectors Compliance Connector Fiber Type Gigabit Ethernet 1000BASE-SX SW MMF 1000BASE-LX LW SMF Table 1-5 lists the SFP port cabling specifications for the SFP modules and connectors used in the adaptive security appliance.
Appendix 1 Cable Pinouts Gigabit and Fibre Channel Ports Cisco ASA 5505 Adaptive Security Appliance Hardware Installation Guide 1-6 OL-18362-01
I N D EX FIPS enclosure B install battery 4-3 3-11 3-11 tamper labels remove 4-3 replace 4-4 3-12 wall-mount 3-11 installing cables 3-1 console port 3-3 I C chassis rack-mount 3-7 ethernet ports rack mount tray 3-8 security bracket 3-9 wall-mount L 3-5 chassis covers removing replace LED 4-2 front panel LEDs 4-3 Cisco warranty 3-2 2-1 LINK LED 3-2 power LED 3-3 rear panel LEDs SSC LEDs D desktop cable lock install 1-1 1-2 4-5 3-4 3-4 M memory 4-6 DIMM E 4-7
Index R RJ-45 connector pinouts 1-4 S Security Services Card (SSC) install replace 4-4 4-5 4-6 site environment 2-3 W Warning AC Power 1-ix Blank Faceplates Chassis 1-viii 1-viii Circuit Breaker Cover Panels 1-ix 1-viii Ground Conductor 1-viii Grounded Equipment Instructions Jewelry 1-vii 1-vii Lightning 1-vii power Supply 1-vii Product Disposal Rack-Mounting SELV 1-x 1-viii 1-viii 1-viii Short-Circuit TN Power Wrist Strap 1-viii, 1-ix 1-ix 1-vii Cisco ASA 5505 Hardware Instal