Table Of Contents
Overview
Read through the entire guide before beginning any of the procedures in this book.
Warning
Only trained and qualified personnel should install, replace, or service this equipment. Statement 49
Caution
This section describes the product and the memory requirements and includes the following topics:
Product Overview
The Cisco ASA 5580 series adaptive security appliance comes in two models the ASA 5580-20 and ASA 5580-40. In addition to world-class performance, the Cisco ASA 5580s also introduces new features and capabilities in the areas of scalable logging, system environmental monitoring, VPN Remote Access user limits, 10 Gigabit Ethernet interfaces, and more.
The ASA 5580-20 delivers 5 Gigabits per second of TCP traffic and UDP performance is even greater. Many features in the system are made multi-core capable to achieve this high throughput. In addition the system delivers greater than 60,000 TCP connections per second and supports up to 1 million connections.
The ASA 5580-40 delivers 10 Gigabits per second of TCP traffic and similar to ASA 5580-20 the UDP performance will be even greater. The ASA 5580-40 delivers greater than 120,000 TCP connections per second and up to 2 million connections in total.
The ASA 5580-20 and the ASA 5580-40 supports 50 security contexts and up to 100 VLAN interfaces (250 VLAN interfaces will be supported in a future release) and 1 Gigabit of IPSec VPN 3DES performance. They support up to 24 Gigabit data ports or up to 12 Ten Gigabit data ports as well as two additional Gigabit ports for management. Optional redundant, hot-swappable power capabilities are available as well as hot-swappable cooling fans in case of a fan failure.
NetFlow version 9 will be used to export information about the progression of a flow from start to finish. The NetFlow implementation will export records indicating significant events in the life of a flow. This is different from traditional NetFlow which exports data about flows at regular intervals. The NetFlow module will also export records about the flows that are denied by Access Lists. You can configure an ASA 5580 to send the following events using NetFlow:
•
•
•
Additionally, the adaptive security appliance software supports Cisco Adaptive Security Device Manager (ASDM). ASDM delivers world-class security management and monitoring through an intuitive, easy-to-use web-based management interface. Bundled with the adaptive security appliance, ASDM accelerates adaptive security appliance deployment with intelligent wizards, robust administration tools, and versatile monitoring services that complement the advanced integrated security and networking features offered by the market-leading suite of the adaptive security appliance. Its secure, web-based design enables anytime, anywhere access to adaptive security appliances.
The system includes environmental monitoring which tracks the operational status of the fans and power supplies. In addition, it tracks the temperatures of the CPUs and the ambient temperature of the system. ASDM provides you with a quick view into these items on the Device Dashboard and the new show environment command has been introduced to provide the information as well.
The ASA 5580 will also support up to 1000 SSL VPN peers, and up to 10,000 total VPN peers.
This release also introduces support for 10 Gigabit Ethernet interfaces and support for jumbo frames up to 9216.
In addition to the above, enhancements have been made to many existing commands to provide greater visibility to the operations of the high performance ASA 5580. You will find changes in the following commands: show version, show activation-key, show interface, show tech, show asp, and more.
This section includes the following sections:
Ports and LEDs
This section describes the front and rear panels. This section includes the following topics:
Front Panel LEDs
Figure 1-1 shows the LEDs on the front panel of the Cisco ASA 5580.
Figure 1-1 Front View
Table 1-1 describes the front panel switches and indicators on Cisco ASA 5580 series adaptive security appliance.
Table 1-1 Front Panel Switches and Indicators
Active1
Indicates the Active and Standby Failover status of the chassis:
•
•
System indicator
Indicates internal system health:
•
•
•
•
Power status indicator
Indicates the power supply status:
•
•
•
•
MGMT0/0 indicator
Indicates the status of the management port:
•
•
•
MGMT0/1 indicator
Indicates the status of the management port:
•
•
•
Power switch and indicator
Turns power on and off:
•
•
•
1 On a standalone device, this button is always on. In Active/Standby pairs, it is on for the active unit and off for the standby unit. In Active/Active pairs, it is on for any unit with an active failover group. Furthermore, when the system software causes the button to light (because it is active or standalone), pushing the button does nothing. It stays lit. When the system software causes the button to be off, pushing the button lights it. Pushing the button again will cause it to turn off again.
For more information on the Management Port, see the management-only command in the Cisco ASA 5580 Adaptive Security Appliance Command Reference.
Rear Panel LEDs and Ports
Figure 1-2 shows the rear panel LEDs and ports.
Figure 1-2 Back Panel Features
Power supply
Interface expansion slots
Power supply
T-15 Torx screwdriver
USB ports
Reserved slot
Example of a populated slot
Reserved slot
Console port
Management ports
Figure 1-3 shows the activity indicators on the Ethernet ports, which has two indicators per port and the power supply indicators.
Figure 1-3 Rear Panel LEDs
Table 1-2 describes the Ethernet port indicators. The behavior of the port indicators varies based on the type of port—management port, port in a Gigabit Ethernet interface card, port in a 10-Gigabit Ethernet Fiber interface card, or a port in a Gigabit Ethernet Fiber interface card.
Table 1-3 describes the power supply indicators.
Internal Components
Figure 1-4 shows the internal components of the Cisco ASA 5580 series adaptive security appliance.
Figure 1-4 Internal Components
Diagnostic Panel
The front panel LEDs indicate hardware status at a high level. The Diagnostic Panel indicators identifies individual components experiencing an error, event, or failure. All indicators are off unless one of the component fails.
Note
Figure 1-5 shows the Diagnostic Panel. For the location of the Diagnostic Panel in the Cisco ASA 5580 chassis, see the "Internal Components" section. For information on how to access the Diagnostic Panel, see the "Accessing the Diagnostic Panel" section on page 4-4.
Figure 1-5 Diagnostic Panel
Table 1-4 lists the indicators that display health status for each component:
Specifications
Table 1-5 lists the specifications for Cisco ASA 5580 series adaptive security appliance.
Table 1-5 Adaptive Security Appliance Specifications
Height
6.94 in. (17.6 cm)
Width
19.0 in. (46.3 cm)
Depth
26.5 in. (67.3 cm)
Weight1
105 lb (47.6 kg)
Form factor
4 RU, standard 19-inch rack-mountable
Rated input voltage
100 to 127 VAC
200 to 240 VACRated input frequency
50 to 60 Hz
Rated input power
1161W @ 100 VAC
1598W @ 200 VACRated input current
12A (100 VAC)
8A (200 VAC)Maximum heat dissipation
3960 BTU/hr (100 VAC)
5450 BTU/hr (200 VAC)Power supply output
910 W (low line)
1300 W (high line)Temperature
Operating 50 to 95°F (10 to 35°C)2
Nonoperating -40°F to 158°F (-40°C to 70°C)Maximum wet bulb temperature
82.4°F (28°C)
Relative humidity (noncondensing)
Operating 10% to 90%
Nonoperating 5% to 95%Altitude
Operating 0 to 6500 ft (2000 m)
Nonoperating 0 to 30,000 ft (9144 m)Shock
Operating Half-sine 2 G, 11 ms pulse, 100 pulses
Nonoperating 25 G, 170 inches/sec delta VVibration
2.2 Grms, 10 minutes per axis on all three axes
1 With full card installation and two power supplies.
2 At sea level with an altitude derating of 1.8°F per every 1000 ft (1.0°C per every 3.0m) above sea level to a maximum of 10,000 ft (3050 m). no direct sustained sunlight.
Memory Requirements
The default DRAM memory is 4096MB and the default internal flash memory is 1024MB for the Cisco ASA 5580.
In a failover configuration, the two units must have the same hardware configuration They must be the same model, have the same number and types of interfaces, and the same amount of RAM.
Note
For more information, see the Configuring Failover chapter in the Cisco Security Appliance Command Line Configuration Guide.
