Establishing the System Ground
This section describes how to connect the system ground to the ASA 5585-X, and contains the following sections:
Note The system ground is also referred to as the network equipment building system ground.
Installations that rely solely on system grounding using only an AC third-prong ground run a substantially greater risk of equipment problems and data corruption than those installations that use both the AC third-prong ground and a properly installed system ground.
The system ground provides additional grounding for EMI shielding requirements and grounding for the low voltage supplies (DC to DC converters). You must observe the following system grounding guidelines for your chassis:
You must install the system ground connection with any other rack or system power ground connections that you make.
You must connect both the system ground connection and the DC power supply ground connection to an earth ground.
For an ASA5585-X that is equipped with DC-input power supplies, you must install the system ground before you attach the source DC power cables to the DC terminal block. If the ASA5585-X is powered on, you must power it off before attaching the system ground. If you are installing the system ground on an ASA5585-X that is equipped with an AC-input power supplies, you do not need to power off the chassis.
Note In all situations, grounding practices must comply with Section 250 of the National Electric Code (NEC) requirements or local laws and regulations. A 6 AWG grounding wire is preferred from the chassis to the rack ground or directly to the common bonding network (CBN). The equipment rack should also be connected to the CBN with 6 AWG grounding wire.
Required Tools and Equipment
To connect the system ground, you need the following tools and materials:
• Grounding lug—A two-hole standard barrel lug that supports up to 6 AWG wire (supplied as part of the system grounding accessory kit).
Grounding screws—Two M4 x 8 mm (metric) pan-head screws (supplied as part of the system grounding accessory kit).
Grounding wire—Should be sized according to local and national installation requirements. Depending on the power supply and system, a 12 AWG to 6 AWG copper conductor is required for U.S. installations. Commercially available 6 AWG wire is recommended. The length of the grounding wire depends on the proximity of the switch to proper grounding facilities (not supplied as part of the system grounding accessory kit).
Number 1 Phillips screwdriver.
Crimping tool to crimp the grounding wire to the grounding lug.
Wire-stripping tool to remove the insulation from the grounding wire.
Connecting the System Ground
To attach the grounding lug and cable to the grounding pad, follow these steps:
Step 1 Use a wire-stripping tool to remove approximately 0.75 inch (19 mm) of the covering from the end of the grounding wire.
Step 2 Insert the stripped end of the grounding wire into the open end of the grounding lug.
Step 3 Crimp the grounding wire in the barrel of the grounding lug and verify that the ground wire is securely attached to the ground lug.
Step 4 Locate and remove the adhesive label from the system grounding pad on the side of the chassis. The location of the system grounding pad is on the left side of the ASA5585-X chassis (when facing the front of the chassis) (Figure 3-1).
The system ground serves as the primary safety ground for the ASA5585-X chassis that is equipped with DC-input power supplies. You must install the system ground before you attach the source DC power cables to the DC terminal block. If the ASA5585-X chassis is already powered on, we recommend that you remove the source DC from the ASA5585-X chassis before attaching the system ground.
Step 5 Place the grounding wire lug against the grounding pad, making sure that there is solid metal-to-metal contact.
Note The grounding lug rotates 180 degrees so that you can have the cable coming through the front or the back of the chassis.
Step 6 Secure the grounding lug to the chassis with two M4 screws. Make sure that the grounding lug and the grounding wire do not interfere with other switch hardware or rack equipment (Figure 3-1).
Figure 3-1 Attaching the Grounding Lug to the Chassis
Ground symbol label
Step 7 Prepare the other end of the grounding wire, and connect it to an appropriate grounding point in your site to ensure adequate earth ground for the switch.
Connecting the Cables to the ASA 5585-X
The ASA 5585-X has two dedicated Gigabit Ethernet interfaces for device management that are called Management 0/0 and Management 0/1. The management interfaces are similar to the console port, because they only accept traffic that is destined to-the-box (versus traffic that is through-the-box).
If you install an IPS SSP or ASA CX SSP, you can connect a cable to the IPS SSP or ASA CX SSP Management 1/0 port to have remote management and monitoring of the IPS SSP or ASA CX SSP. It is not required, but if you do not connect to the Management 1/0 port, you will have to session to the IPS SSP or ASA CX SSP from the ASA 5585-X to gain access to the it. Without directly connecting to the IPS SSP or ASA CX SSP, you cannot manage or monitor it over the network.
Depending on your configuration, you can configure any interface to be a management-only interface using the management-only command. You can also disable management-only configuration mode on the management interface. For more information about this command, see the management-only command in the
Cisco ASA 5580 Adaptive Security Appliance Command Reference
Make sure the chassis is grounded before connecting the cables.
To connect the ASA 5585-X cables to the network interfaces, follow these steps:
Step 1 Connect to the management interface, Management 0/0.
a. Locate an Ethernet cable, which has an RJ-45 connector on each end.
b. Connect one RJ-45 connector to the Management 0/0 interface.
c. Connect the other end of the Ethernet cable to the Ethernet port on your computer or to your management network.
Management and console ports are privileged administrative ports. Connecting them to an untrusted network can create security concerns.
Step 2 (Optional) Connect to the SSP console port if you want to use the ASA CLI. Connect to the IPS SSP or ASA CX SSP console port if you want to use the IPS or ASA CX SSP CLI.
Use the console port to connect to a computer to enter configuration commands.
a. Before connecting a computer or terminal to any ports, determine the baud rate of the serial port. The baud rate of the computer or terminal must match the default baud rate (9600 baud) of the console port of the adaptive security appliance.
Set up the terminal as follows: 9600 baud (default), 8 data bits, no parity, 1 stop bits, and Flow Control (FC) = Hardware.
Note The console port settings are the same for the SSP, IPS SSP, and ASA CX SSP.
b. Connect the RJ-45 to the console port and connect the other end to your computer.
Step 3 (Optional) Connect to the SFP/SFP+ port if you are using fiber ports.
The ASA 5585-X SSP-10 and SSP-20 have two SFP/SFP+ ports. The ASA 5585-X SSP-40 and SSP-60 have four SFP/SFP+ ports.
If you are using the fiber ports, you need an SFP+ module for 10-Gigabit Ethernet (a license may be required) or an SFP module for 1-Gigabit Ethernet (SFP or SFP+ modules are not included).
a. Install the SFP/SFP+ module.
b. Connect one end of the LC cable to the SFP/SFP+.
c. Connect the other end of the LC cable to a network device, such as a router or switch.
Step 4 Install the electrical cables.
a. Attach the power cable to the power supply module on the back of the ASA 5585-X.
b. If you have redundant power supply modules, you must connect both power cables to the back of the ASA 5585-X.
Power supply module (PS0)
Power supply module (PS1)
c. Plug the power cable(s) in to a power source (we recommend a UPS).
Step 5 Power on the ASA 5585-X.
If the appliance is subjected to environmental overheating, it shuts down and you must manually power cycle it to turn it on again.
Step 6 Check the PWR indicator on the front panel of the ASA 5585-X to verify interface connectivity. It should be green. To verify power supply operation, check the PS0 and PS1 indicators on the front panel. They should be green. On the back panel of the ASA 5585-X, make sure the IN OK and the FAN OK indicators are green and the OUT FAIL indicator is off.