Cisco Systems ASA 5505 manuale d’uso

Americas Hea dquarters Cisc o Syst ems , Inc . 170 West Ta sman Driv e San Jos e, CA 95 134-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553- NETS (638 7) Fax: 408 527-0883 Cisco A S A 5505 A daptiv e Security Appliance H ardw are Installation Guide Custome r Order Numb er: O L-18362- 01 Text Pa rt Numbe r: OL -18362-0 1[...]

THE SPECIFICATIONS AND INFORMATION REGARDING TH E PRODUCTS IN THIS MANUAL ARE SUBJE CT TO CHANGE WITHOUT NO TICE. ALL STATEMENT S, INFORMATI O N, AND RE COMMENDATIONS IN T HIS MANUAL ARE BELI EVED TO BE ACCURATE BUT A RE PRESEN TED WITHOUT WARRANTY OF ANY KIND, EXPRE SS OR IMPLIED. USERS MUST TA KE FULL RESPONSIBILITY FOR THEIR AP PLICATION OF ANY [...]

iii Cisco ASA 5505 Hardware Installation Guide OL-18362-01 CONTENTS About Th is Guide v Docume nt Obje ctives v Audienc e v Document Organizati on v Document Conventions vi Insta llati on War nings vi Where t o Find Safe ty and War n ing I nformation x Obtain ing Documentat ion and Submitti ng a Service Req uest 1-x CHAPTER 1 Overview 1-1 Pro duct [...]

Cont ents iv Cisco ASA 5505 Hardware In stallation Guide OL-18362-01 Rack-Mou nting the C hassis 3-7 Instal ling and Wall- M ounti ng the Cisc o ASA 5505 FIPS Enclos ure 3-11 CHAPTER 4 Maintenanc e and Upgrade Procedure s 4-1 Removing and Repl acing the Chassi s Cover 4-1 Working in an ESD Environment 4-1 Removing the Chas sis Cov er 4-2 Replac ing[...]

v Cisco ASA 5505 Adapt ive Security Applia nce Hard ware Installation Gui de OL-18362-01 About This Guide This pre face inc ludes the follo wing sections : • Documen t Objecti ves, p age v • Audien ce, page v • Docume nt Organization , page v • Document Con ventions , pag e vi • Installatio n W arnin gs, page vi • Obtaining Doc umentati[...]

vi Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 About Thi s Guide • Chapter 4, “Mainten ance a n d Up grade Procedures, ” desc ribes the adapti ve security applia nce maint enance and upgr ade pro cedu res. • Appendix 1, “Ca ble Pino uts, ” descr ibes the cable pinouts. Document Co nventions Com[...]

vii Cisco ASA 5505 Adapt ive Security Applia nce Hard ware Installation Gui de OL-18362-01 About This Guide • Blank Facep lates and Cover Panels W arnin g, page viii • Product D isposal W arnin g, pa ge viii • Short-Circuit Pr otection W arning, pa g e ix • Compliance with Local and Na tional Elec tr ical Co d es W arning, pa g e ix • DC [...]

viii Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 About Thi s Guide Chassis War ning for Rack-Mo unting and S ervicing War ni n g T o pr eve nt bodily injury when m ounting or servicing this unit in a rack, you must take special precautions to ens ure that the system remains stab l e. The following guidelin[...]

ix Cisco ASA 5505 Adapt ive Security Applia nce Hard ware Installation Gui de OL-18362-01 About This Guide Short-Ci r cuit Prot ection Warning War ni n g This product requires short-circuit (overcurrent) pr ot ection, to be provided as part of the building installation. Inst all only in accordance wi th national and local wiring regulations. Statem[...]

x Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 About Thi s Guide Obtainin g Docume ntation and Submitt ing a Service Requ est Grounded Equipme nt Warning War ni n g This equipment is intended to be grounded. Ensure t hat the host is connected to e arth ground during normal use. Statement 39 Safety C over Re[...]

CH A P T E R 1-1 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 1 Overview Read thr ough the en tire guid e before begi nning any of the proc edures i n this book. War ni n g Only trained and qualified personnel should inst all, replace, or service this eq ui pm en t . Statement 49 Cautio n Read the safety[...]

1-2 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Ch apter 1 Ov erv iew Product O verview Figur e 1 -1 Fr ont P anel LEDs and P orts Figure 1-2 shows the re ar pane l LEDs and Ports. Figur e 1 -2 Rear P anel LEDs and P orts (A C Po wer Supply Mode l Shown) 1 USB 2.0 interf ace 5 Status 2 100 Mbps 6 Acti ve 3[...]

1-3 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 Chapter 1 Overview Mem ory Re quire men ts Memory Re quirem ents The def ault DRAM memory is 2 5 6MB and th e default inter nal flash m e mory is 1 28 MB f or the Cisco ASA 5505 . In a failo ver confi guration, the two units must hav e the same hardware co[...]

1-4 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Ch apter 1 Ov erv iew Memory Req uiremen ts[...]

CH A P T E R 2-1 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 2 Preparing for Installation The info rmat ion in this guide a pplies to the Cisco ASA 5505 In th is guide, refer ences t o “adaptiv e security appliance” or se cu ri ty ap pl ian ce a pp l y to the Cisco ASA 5505 chass is unle ss specif i[...]

2-2 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Chapter 2 Preparing for Installation Safety Recomm endations The sa fety guide lin es are a s fol lows: • K eep the chassi s area clear and du st-free bef ore, duri ng and af ter insta llation. • Keep tools away from walk ar eas wher e you and othe rs cou[...]

2-3 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 Chapter 2 Preparing for Inst allation General Site Requirements Preventing E lectro static Discha rge Damage Electr ostatic discharge (E SD) can da mage e quipmen t and im pair ele ctrica l circui try . ESD dam age occu rs when electr onic components ar e [...]

2-4 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Chapter 2 Preparing for Installation General Site Requiremen ts • Elec trical equ ipment genera tes heat. Ambien t air temper ature might not be ade q uate to cool equipment to acceptable o p erating temperatures with out adequate circulation . Ensure that [...]

CH A P T E R 3-1 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 3 Installing the Cisco ASA 5505 Installing the Chassis This section con tains the follo wing topics: • Connec ting the Interf ace Cables, pag e 3-1 • Powering on the Cisco ASA 5505, page 3-3 • Install ing a Cabl e Lock , page 3-4 • Rac[...]

3-2 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Chapter 3 Installing the Cisco ASA 5505 Connecti ng the Interf ace Cables a. Ether net port s Step 1 Connect Por t 0, the outside Ethernet port, to the pu b lic ne twork, that is, the In ternet: Note By default, s witch po rt 0/0 is the outs ide por t. If n e[...]

3-3 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 Chapter 3 Installin g the Cisco ASA 5505 Powering on the C isco ASA 5505 b. Console po rt Y ou ca n access the command lin e for adm inistra tion usin g the consol e port on th eCisco ASA 5505. T o connec t to th e conso le port an d run a seri al te rmina[...]

3-4 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Chapter 3 Installing the Cisco ASA 5505 Instal ling a Cable Lock Note The light will be solid green, only fo r 100Mbps devices. Installing a Cable Lock The Ci sco ASA 5505 include s a slot that accept s stand ard de sktop c able lo cks to provide phy sical se[...]

3-5 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 Chapter 3 Installin g the Cisco ASA 5505 Rack or Wall Mounting the Cisco AS A 5505 Mounting th e Chas sis Y ou ca n wall-moun t or rack- mount the adap tiv e securit y appli ance. Th e part num ber for ordering a wall- m ount kit for the ad apti ve securit[...]

3-6 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mou nting the Cisco ASA 550 5 Step 6 Remov e the three screw s from the bottom of the adapti ve security appliance as sho wn in Figure 3-13 . Discard these screw s as you will not need them. Step 7 Place th[...]

3-7 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 Chapter 3 Installin g the Cisco ASA 5505 Rack or Wall Mounting the Cisco AS A 5505 Step 9 Allowing the s crews in t he anc hors to go t hroug h the holes i n the bracke ts, moun t and slide down the adapti ve securi ty appliance. Figur e 3-5 Mounting the C[...]

3-8 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mou nting the Cisco ASA 550 5 Step 3 Place the wall-moun t b racke t with the adapti ve security app liance attached to it o n the rack mount tr ay as sh own in Figure 3-6 . Figur e 3-6 Placing the Device o[...]

3-9 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 Chapter 3 Installin g the Cisco ASA 5505 Rack or Wall Mounting the Cisco AS A 5505 Step 5 Scre w in the security bra cket to the front of the rack mount as shown in Figure 3-7 , to hold i t in place . Figur e 3-7 At taching the Sec urity Br ack et 1 Securi[...]

3-10 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mou nting the Cisco ASA 550 5 Step 6 Attach the rac k -mount tray to the rack using the supplied scre ws, as shown in Figure 3-8 . Figur e 3-8 At taching the Rac k Mount T r ay t o the Rack T o remove the [...]

3-11 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 Chapter 3 Installin g the Cisco ASA 5505 Rack or Wall Mounting the Cisco AS A 5505 Installing and Wall-Mounting the Cisco ASA 5505 FIPS Enclosure Figure 3-9 shows the FIPS enc losure for the Cisc o ASA 5 505. Figur e 3-9 FIPS Enclo sure T o inst all and w[...]

3-12 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mou nting the Cisco ASA 550 5 Figur e 3-1 0 Bot t om V iew of the FIP S Enclosur e Step 3 Drill a hole on the wall at each mark you ma de for the loc ation f or t he p la st ic a nc ho r s. Step 4 Press th[...]

3-13 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 Chapter 3 Installin g the Cisco ASA 5505 Rack or Wall Mounting the Cisco AS A 5505 Step 7 Remove the three screws from the bottom of the Cisco AS A 5505 as shown in Figure 3-1 2 . Figu re 3-12 Removi ng th e Screws Step 8 Slide the ASA 5540 into t he FIPS[...]

3-14 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mou nting the Cisco ASA 550 5 Figur e 3-14 T amper Ev ident Lab el Applied Over the Scr ew Step 11 The thir d tamper e v ident la b el should be placed so t h at the o n e half o f the ta mper ev id ent la[...]

3-15 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 Chapter 3 Installin g the Cisco ASA 5505 Rack or Wall Mounting the Cisco AS A 5505 Step 12 Pi c k u p th e Ci s co A S A 5 50 5 w it h th e FI P S e n c l os u r e facing the wall, align the scre ws in the anchors with t he h ol es in the enclosu re. Step[...]

3-16 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Chapter 3 Installing the Cisco ASA 5505 Rack or Wall Mou nting the Cisco ASA 550 5[...]

CH A P T E R 4-1 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 4 Maintenance and Upgrade Procedures This chap ter describe s how to in stall the ch assis on the wall or rack, remo ve and repl ace the chassis cov er , the power supply , and the CompactFl ash. This chapter includes th e follo wing sections:[...]

4-2 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Chapter 4 Maintenance an d Upgrade Proc edures Removing and Repla cing the Cha ssis Cover Removin g the Ch assis Cover To remov e the chassis co ver , perfo rm the following steps: Note Removing the chassis co ve r does not af fect Cisco warranty . Upgradin g[...]

4-3 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 Chapter 4 Maintena nce and Upgr ade Proce dures Replacing the Lithium Battery Replacing the Cha ssis Co ver Cautio n Do not oper ate the adapti ve secu rity app liance without the chassis cov er ins talled. Th e chassis cov er protects the intern al compon[...]

4-4 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Chapter 4 Maintenance an d Upgrade Proc edures Installing and Repla cing the SSC Figu re 4-2 Ci sco ASA 55 05 L ithiu m Battery L ocat ion Step 3 Place the use d battery aside. Step 4 Replace the battery with a compactible Lithium CR-20 32 ba ttery (which is [...]

4-5 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 Chapter 4 Maintena nce and Upgr ade Proce dures Installing and Replacing the SSC Ta b l e 4 - 1 de scribe s the SSC L EDs. Installing an SSC T o install a new SSC for the f irst time, perform the follo wing steps: Step 1 Po wer off the adap tiv e security [...]

4-6 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Chapter 4 Maintenance an d Upgrade Proc edures Upgradi ng Memor y Replacing an SSC T o repl ace an existing SSC, perform the fol lowing steps: Step 1 Ente r t he hw-m od mod 1 shut command in pri vileged EXEC mode. V erify if the module is down by chec king t[...]

4-7 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 Chapter 4 Maintena nce and Upgr ade Proce dures Upgr adi ng Mem or y This sec tio n d esc ri bes how to r em ove and in stal l t he m emo ry m od ule on the adapti ve secu rity app lianc e. This secti on includes the follo wing topics: • Remo ving t he D[...]

4-8 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Chapter 4 Maintenance an d Upgrade Proc edures Upgradi ng Memor y T o prevent ESD damage , handle DI MMs as shown in Figure 7 . Figur e 7 Handlin g a DIMM Step 3 Pull the latche s away from the DIMM at both ends. See Figure 8 . Step 4 When b o th en ds of the[...]

4-9 Cisco ASA 5505 Adapti ve S ecurity Ap p liance Hard w are I nstallation Guide OL-18362-01 Chapter 4 Maintena nce and Upgr ade Proce dures Upgr adi ng Mem or y Figur e 9 Inser ting t he DIMM Cautio n When insert ing DIMMs , use firm but not excessiv e pressure. Y ou can c ause dama ge to the socket. When you fi nish installing ne w memory , repl[...]

4-10 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Chapter 4 Maintenance an d Upgrade Proc edures Upgradi ng Memor y[...]

1-1 Cisco ASA 5505 Adapti ve Security Applia nce Hard ware Installation Gui d e OL-18362-01 APPENDIX 1 Cable Pinouts This append ix describes p inout infor mation for 10 / 10 0 /1 00 0 Ba s eT p o rt s , console and the RJ-45 to DB-9 ports, and the Management 10/10 0/1000 Ethernet port, and includes th e fo l low in g s e c ti o ns : • 10/100/10 [...]

1-2 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Appendix 1 Cable Pinouts Console Port (R J-45) Figure 1-2 shows the 10Ba seT , 100Base TX, and 1000BASE-T conn ector (RJ-45 ). Figur e 1 -2 1 0/1 00/1 00 0 Po rt Pinouts Console Port (RJ-45) Cisco produc ts use the fo llowing types of RJ-45 cabl es: • Strai[...]

1-3 Cisco ASA 5505 Adapt ive Security Applia nce Hard ware Installation Gui de OL-18362-01 Append ix 1 Cable Pinouts Console P ort (RJ-45) T o id entif y the RJ-45 c able type, hold t he two ends of the cabl e next to eac h othe r so that you can see the colored wires in side the ends, as sho wn in Figure 1-4 . Figu re 1 -4 RJ- 45 Ca ble I den tif [...]

1-4 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Appendix 1 Cable Pinouts RJ-45 t o DB-9 RJ-45 to DB-9 Ta b l e 1 - 2 l ists t he cab le pino uts for RJ-45 to DB -9 or DB-25. MGMT 10/100/1000 Ethernet Port The MGMT 10/100/ 1000 Ether net po rt is an E ther net po rt wit h an RJ-45 conn ector . Y o u can use[...]

1-5 Cisco ASA 5505 Adapt ive Security Applia nce Hard ware Installation Gui de OL-18362-01 Append ix 1 Cable Pinouts Gigabit an d Fibre Channe l Ports Gigabit and Fibre Ch annel Ports Ta b l e 1 - 4 lists the ty pes of SFP modules and connectors used in the adapt ive security appliance . Ta b l e 1 - 5 lists the SFP port cabling specifications fo r[...]

1-6 Cisco ASA 5505 Adaptive Se curity Applia nce Ha rdware Installation Guid e OL-18362-01 Appendix 1 Cable Pinouts Gigabit an d Fibre Channel Port s[...]

IN-1 Cisco ASA 5505 Hardware Installation Guide OL-18362-01 INDEX B battery 4-3 remove 4-3 replace 4-4 C chass is rack-m ount 3-7 rack m ount tray 3-8 secu rity bracke t 3-9 wall-mount 3-5 chass is cove rs removi ng 4-2 replace 4-3 Cisco warr anty 2-1 D desk top cable l ock 3-4 install 3-4 E elect rostatic disc harge see ESD ESD preven ting 2-3, 4-[...]

Index IN-2 Cisco ASA 5505 Hardwa re Installatio n Guide OL-18362-01 R RJ-45 co nnecto r pinouts 1-4 S Security Services Card (SSC) 4-4 install 4-5 replace 4-6 site environment 2-3 W Warning AC Power 1-ix Blan k Facep late s 1-viii Chassis 1-viii Circuit Breaker 1-ix Cover Panels 1-viii Ground Con ductor 1-viii Grounde d Equipme nt 1-x Instruc tions[...]