Guest

Cisco ASA 5500-X Series Next-Generation Firewalls

Cisco ASA 5585-X Quick Start Guide

  • Viewing Options

  • PDF (710.5 KB)
  • Feedback

Table of Contents

Cisco ASA 5585-X Quick Start Guide

1. Package Contents

2. Power On the ASA

3. Network Considerations for Multiple SSPs

4. Connect Interface Cables and Verify Connectivity

5. Launch ASDM

6. Run ASDM Wizards and Advanced Configuration

Cisco ASA 5585-X Quick Start Guide

Updated: February 18, 2015

1. Package Contents

This section lists the package contents of each chassis. Note that contents are subject to change, and your exact contents might contain additional or fewer items.

 

 

1

ASA 5585-X Chassis

2

Power Cable (US Shown)

3

Blue Console Cable PC Terminal Adapter

4

Cable Management Brackets

5

4 Cable Management Bracket Screws

6

Ground Lug Kit

7

Slide Rail Kit

Note: The ASA 5585-X with SSP-10, SSP-20, or SSP-40 ships with one power supply module installed and one power cable. The ASA 5585-X with SSP-60, ships with two power supply modules installed and two power cables.

2. Power On the ASA

1. Attach the power cable to the back of the ASA. If you have redundant power supplies, you must connect both power cables to the back of the chassis.

 

 

1

Power Supply Module (PS0)

2

Power Supply Module (PS1)

2. Connect the power cables to the electrical outlets.

3. Power on the ASA. If you have redundant power supplies, you must power on both modules.

4. Check the Power LED on the front of the ASA; the AC ON indicator should be green, the FAN ON indicator should be green, and the OUT OK indicator should be off.

3. Network Considerations for Multiple SSPs

The ASA SSP resides in slot 0 (bottom). A second SSP (or network module) can be installed in slot 1 (top). When you install a non-ASA SSP in slot 1, all non-management interfaces belong to the ASA in slot 0, while the management interfaces belong to the module. If you install dual ASA SSPs, then they are completely independent systems.

 

Default Configuration for Management

See the following table for default configurations for the Management interfaces depending on which module is installed in slot 1. Note that the left-hand Management interface (when facing the back of the chassis) is not configured by default.

 

Slot 0 Module

Management Interface ID

Default IP address

Slot 1 Module

Management Interface ID

Default IP address

ASA SSP

The ASA SSP is the only supported module in slot 0.

Management 0/0
192.168.1.1
ASA SSP
Management 0/0
192.168.1.1

If you want to put both ASA SSPs on the same network, you must change from this default.

All other SSPs
Management 1/0
Varies. See the module quick start guide for exact values.

All management traffic to and from the non-ASA SSP must enter and exit the Management 1/0 or 1/1 interface. Because this interface is not an ASA data interface, traffic cannot pass through the ASA over the backplane; you need to physically cable the management interface to an ASA interface. Non-ASA SSPs typically need Internet access for updates. See the following typical cabling setup to allow SSP access to the Internet through the ASA management interface. Other options are possible, depending on how you want to connect your network; for example, you can make the Management 1/0 interface outside facing; or you can route between it and a different ASA interface if you have an inside router; and so on.

 

4. Connect Interface Cables and Verify Connectivity

1. Cable the management and data interfaces. See 3. Network Considerations for Multiple SSPs for a sample cabling scenario.

 

 

1

(Optional) Slot 1 module, multiple types available.

2

Slot 0 ASA SSP

3

ASA SSP Management 0/0 interface (RJ-45)

 

 

2. If you do not use the Management 0/0 for ASA management, you need to configure a data interface for management. Do one of the following, then recable the computer so it is on the new management network:

Connect to the console port to configure a data interface for management with CLI. See the Getting Started chapter in the general operations configuration guide for detailed steps.

Temporarily connect to Management 0/0, launch ASDM (see 5. Launch ASDM), and configure a data interface for management.

3. If you are using the fiber interfaces, you need an SFP+ module for 10-Gigabit Ethernet (a license may be required) or an SFP module for Gigabit Ethernet. (SFP or SFP+ modules are not included.)

The interfaces available depend on your model. See the hardware guide for more information.

4. Check the LINK/ACT indicators to verify interface connectivity.

5. For software module configuration, see the ASA FirePOWER quick start guide, ASA CX quick start guide, or IPS quick start guide.

5. Launch ASDM

Using ASDM, you can use wizards to configure basic and advanced features. ASDM is a graphical user interface that allows you to manage the ASA using a web browser. See the ASDM release notes on Cisco.com for the requirements to run ASDM.

Procedure

1. On the computer connected to the ASA Management 0/0 interface, launch a web browser.

2. In the Address field, enter the following URL: https://192.168.1.1/admin. The Cisco ASDM web page appears.

3. Click one of the available options: Install ASDM Launcher, Run ASDM, or Run Startup Wizard.

4. Follow the onscreen instructions to launch ASDM according to the option you chose. The Cisco ASDM-IDM Launcher appears.

5. Leave the username and password fields empty, and click OK. The main ASDM window appears.

6. Run ASDM Wizards and Advanced Configuration

ASDM includes many wizards to configure your security policy. See the Wizards menu for all available wizards, including the Startup Wizard for initial deployment. To continue configuring your ASA, see the documents available for your software version at Navigating the Cisco ASA Series Documentation.

© 2015 Cisco Systems, Inc. All rights reserved.