Cisco ASA 5580 Getting Started Guide, 8.2
Installing the ASA 5580

Table Of Contents

Installing the ASA 5580

Verifying the Package Contents

Installing the Chassis

Rack-Mounting the Chassis

Ports and LEDs

Front Panel LEDs

Rear Panel LEDs and Ports

Connecting Interface Cables

What to Do Next


Installing the ASA 5580



Caution Read the safety warnings in the Regulatory Compliance and Safety Information for the Cisco ASA 5500 Series and follow proper safety procedures when performing these steps.


Warning Only trained and qualified personnel should install, replace, or service this equipment. Statement 49


This chapter describes the adaptive security appliance and rack-mount and installation procedures for the adaptive security appliance. This chapter includes the following sections:

Verifying the Package Contents

Installing the Chassis

Ports and LEDs

Connecting Interface Cables

What to Do Next

Verifying the Package Contents

Verify the contents of the packing box, shown in Figure 3-1, to ensure that you have received all items necessary to install the ASA 5580.

Figure 3-1 Contents of ASA 5580 Package

In addition to the contents shown in Figure 3-1, the contents of ASA 5580 package include the rail system kit. The rail system kit contains the following items:

Two slide assemblies

Two chassis rails

Four Velcro straps

Six zip ties

One cable management arm

A package of miscellaneous parts (screws, and so forth)

One cable management arm stop bracket

Installing the Chassis

This section describes how to rack-mount and install the adaptive security appliance.


Warning To prevent bodily injury when mounting or servicing this unit in a rack, you must take special precautions to ensure that the system remains stable. The following guidelines are provided to ensure your safety.


The following information can help plan equipment rack installation:

Allow clearance around the rack for maintenance.

When mounting a device in an enclosed rack ensure adequate ventilation. An enclosed rack should never be overcrowded. Make sure that the rack is not congested, because each unit generates heat.

When mounting a device in an open rack, make sure that the rack frame does not block the intake or exhaust ports.

If the rack contains only one unit, mount the unit at the bottom of the rack.

If the rack is partially filled, load the rack from the bottom to the top, with the heaviest component at the bottom of the rack.

If the rack contains stabilizing devices, install the stabilizers prior to mounting or servicing the unit in the rack.


Warning Before performing any of the following procedures, ensure that the power source is off. (AC or DC). To ensure that power is removed from the DC circuit, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the OFF position, and tape the switch handle of the circuit breaker in the OFF position.


Rack-Mounting the Chassis


Warning To prevent bodily injury when mounting or servicing this unit in a rack, you must take special precautions to ensure that the system remains stable. The following guidelines are provided to ensure your safety:
This unit should be mounted at the bottom of the rack if it is the only unit in the rack.
When mounting this unit in a partially filled rack, load the rack from the bottom to the top with the heaviest component at the bottom of the rack.
If the rack is provided with stabilizing devices, install the stabilizers before mounting or servicing the unit in the rack. Statement 1006
This procedure requires two or more people to position the adaptive security appliance on the slide assemblies before pushing it in to the rack.


To install the adaptive security appliance in the rack, perform the following steps:


Step 1 Attach the chassis side rail to the adaptive security appliance by aligning the chassis rail to the stud on the adaptive security appliance, pressing the chassis side rail in to the stud, and then sliding the chassis side rail backwards until you hear the latch catch, as shown in Figure 3-2.

Figure 3-2

Chassis Side Rail Attachment


Note The tapered end of the chassis side rail should be at the back of the adaptive security appliance. The chassis side rail is held in place by the inner latch.


Step 2 Repeat Step 1 for each chassis side rail.

Step 3 To remove the chassis side rail, lift the latch, and slide the rail forward, as shown in Figure 3-3.

Figure 3-3

Removal from the Chassis Side Rail

Step 4 If you are installing the adaptive security appliance in a shallow rack, one that is less than 28.5 in. (72.39 cm), remove the screw from the inside of the slide assembly before continuing with Step 5, as shown in Figure 3-4.

Figure 3-4

Screw Inside the Slide Assembly

Step 5 Attach the slide assemblies to the rack, as shown in Figure 3-5.

For round- and square-hole racks:

a. Line up the studs on the slide assembly with the holes on the inside of the rack and snap into place.

b. Adjust the slide assembly lengthwise to fit the rack. The spring latch locks the slide assembly into position.

Figure 3-5 Slide Assembly Attachment

c. Repeat for each slide assembly.

Make sure the slide assemblies line up with each other in the rack.

d. Lift the spring latch to release the slide assembly if you need to reposition it.

For threaded-hole racks:

a. Remove the eight round- or square-hole studs on each slide assembly using a standard screwdriver, as shown in Figure 3-6.


Note You may need a pair of pliers to hold the retaining nut.


Figure 3-6

Attachment in Threaded Hole Racks

b. Line up the bracket on the slide assembly with the rack holes, install two screws (top and bottom) on each end of the slide assembly, as shown in Figure 3-7.

Figure 3-7

Lining up the Bracket

c. Repeat for each slide assembly.

Step 6 Extend the slide assemblies out of the rack, as shown in Figure 3-8.

Figure 3-8

Slide Assemblies Extended

Step 7 Align the chassis side rails on the adaptive security appliance with the slide assembly on both sides of the rack, release the blue slide tab (by either pulling the tab forward or pushing the tab back), and carefully push the adaptive security appliance in to place, as shown in Figure 3-9.


Warning When installing a adaptive security appliance in an empty rack, you must support the adaptive security appliance from the front until the blue slide tabs are activated and the adaptive security appliance is pushed completely in to the rack, or the rack can tip.


Figure 3-9 Alignment of the Chassis Side Rails


Caution Keep the adaptive security appliance parallel to the floor as you slide it into the rails. Tilting the adaptive security appliance up or down can damage the slide rails.


Ports and LEDs

This section describes the front and rear panels. This section includes the following topics:

Front Panel LEDs

Rear Panel LEDs and Ports

Front Panel LEDs

Figure 3-10 shows the LEDs on the front panel of the adaptive security appliance.

Figure 3-10 Front View

1

Active LED

2

System LED

3

Power Status LED

4

Management 0/0 LED

5

Management 0/1 LED

6

Power


Table 3-1 describes the front panel switches and indicators on the ASA 5580.

Table 3-1 Front Panel Switches and Indicators 

Indicator
Description

Active1

Indicates the Active and Standby Failover status of the chassis:

On—Failover active

Off—Standby Status

System indicator

Indicates internal system health:

Green—System on

Flashing amber—System health degraded

Flashing red—System health critical

Off—System off

Power status indicator

Indicates the power supply status:

Green—Power supply on

Flashing amber—Power supply health degraded

Flashing red—Power supply health critical

Off—Power supply off

MGMT0/0 indicator

Indicates the status of the management port:

Green—Linked to network

Flashing green—Linked with activity on the network

Off—No network connection

MGMT0/1 indicator

Indicates the status of the management port:

Green—Linked to network

Flashing green—Linked with activity on the network

Off—No network connection

Power switch and indicator

Turns power on and off:

Amber—System has AC power and is in standby mode

Green—System has AC power and is turned on

Off—System has no AC power

1 On a standalone device, this button is always on. In Active/Standby pairs, it is on for the active unit and off for the standby unit. In Active/Active pairs, it is on for any unit with an active failover group. Furthermore, when the system software causes the button to light (because it is active or standalone), pushing the button does nothing. It stays lit. When the system software causes the button to be off, pushing the button lights it. Pushing the button again will cause it to turn off again.


For more information on the Management Port, see the management-only command in the Cisco ASA 5500 Series Command Reference.

Rear Panel LEDs and Ports

Figure 3-11 shows the rear panel LEDs and ports.

Figure 3-11 Back Panel Features

1

Power supply

2

Interface expansion slots

3

Power supply

4

T-15 Torx screwdriver

5

USB ports

6

Reserved slot

7

Example of a populated slot

8

Reserved slot

9

Console port

10

Management ports


Figure 3-12 shows the activity indicators on the Ethernet ports, which has two indicators per port and the power supply indicators.

Figure 3-12 Rear Panel LEDs

1

Power indicator

2

Link indicator

3

Activity indicator

 

Table 3-2 describes the Ethernet port indicators. The behavior of the port indicators varies based on the type of port—management port, port in a Gigabit Ethernet interface card, port in a 10-Gigabit Ethernet Fiber interface card, or a port in a Gigabit Ethernet Fiber interface card.

Table 3-2 Ethernet Port Indicators

Indicator
Description

Gigabit Ethernet

Green (top): link to network

Flashing Green (top): linked with activity on the network

Amber (bottom): Speed 1000

Green (bottom): Speed 100

Off (bottom): Speed 10

10-Gigabit Ethernet Fiber (one LED)

Green: link to network

Flashing green: linked with activity on the network

Gigabit Ethernet Fiber (one LED)

Green: link to network

Flashing green: linked with activity on the network

Management port

Green (right): link to network

Flashing green (left): linked with activity on the network


Note The indicator on the management ports show a green LED regardless of the negotiated speed (10/100/1000); however, the Gigabit Ethernet interface cards show an amber LED when a 1000 Mbps link is negotiated.



Table 3-3 describes the power supply indicators.

Table 3-3 Power Supply Indicators  

Fail Indicator 1
Amber
Power Indicator 2
Green
Description

Off

Off

No AC power to any power supply

Flashing

Off

Power supply failure (over current)

On

Off

No AC power to this power supply

Off

Flashing

AC power present

Standby mode

Off

On

Normal


Connecting Interface Cables

This section describes how to connect the appropriate cables to the Console, Management, copper Ethernet, and fiber Ethernet ports.

To connect cables to the network interfaces, perform the following steps:


Step 1 Place the chassis on a flat, stable surface, or in a rack (if you are rack-mounting it).

Step 2 Connect to the Management port.

The adaptive security appliance has a dedicated interface for device management that is referred to as the Management0/0 port. The management ports (Management0/0 port and Management 0/1) are Fast Ethernet interfaces. The management ports are similar to the Console port, but they only accept traffic that is destined to-the-box (versus traffic that is through-the-box). Management0/0 (MGMT0/0) is the command and control port.


Note You can configure any interface to be a management-only interface using the management-only command. You can also disable management-only configuration mode on the management interface. For more information about this command, see the management-only command in the Cisco ASA 5500 Series Command Reference.


a. Locate an Ethernet cable, which has an RJ-45 connector on each end.

b. Connect one RJ-45 connector to the Management0/0 port, as shown in Figure 3-13.

c. Connect the other end of the Ethernet cable to the Ethernet port on your computer or to your management network.


Note When connecting a computer directly to the management port on the adaptive security appliance, use a crossover Ethernet cable. When connecting a computer to the adaptive security appliance through a hub or switch, use a straight through Ethernet cable to connect the hub or switch to the management port on the adaptive security appliance.


Figure 3-13 Connecting to the Management Port


Caution Management and console ports are privileged administrative ports. Connecting them to an untrusted network can create security concerns.

Step 3 Connect to the Console port. Use the Console port to connect to a computer to enter configuration commands.

a. Before connecting a computer or terminal to any ports, check to determine the baud rate of the serial port. The baud rate of the computer or terminal must match the default baud rate (9600 baud) of the Console port of the adaptive security appliance.

Set up the terminal as follows: 9600 baud (default), 8 data bits, no parity, 1 stop bits, and Flow Control (FC) = Hardware.

b. Connect the RJ-45 to a DB-9 adapter connector to the Console port and connect the other end to the DB-9 connector on your computer, as shown in Figure 3-14.


Note You can use a 180/rollover or straight-through patch cable to connect the appliance to a port on a terminal server with RJ-45 or hydra cable assembly connections. Connect the appropriate cable from the Console port on the appliance to a port on the terminal server.


Figure 3-14 Connection of the RJ-45 to a DB-9 Adapter

Step 4 Connect to copper and fiber Ethernet ports to be used for network connections. Copper and Fiber Ethernet ports are available in slots 3 to slot 8.

By default, the ASA 5580 ships with slot 3 through slot 8 available. You can purchase bundles for the I/O adapter options. See Optimizing Performance in Chapter 2, "Maximizing Throughput on the ASA 5580".

a. Connect one end of an Ethernet cable to an Ethernet port in slots 3 through 8, as shown in Figure 3-15.

Figure 3-15 Copper Ethernet or a Fiber Ethernet Interface

b. Connect the other end of the Ethernet cables to a network device, such as a router or switch.

Step 5 Install the electrical cables at the back of the adaptive security appliance. Attach the power cables and plug them in to a power source (we recommend a UPS), as shown in Figure 3-16.

Figure 3-16

Electrical Cable Installation

Step 6 Power on the chassis.


What to Do Next

Continue with Chapter 4, "Configuring the Adaptive Security Appliance."