Cisco ASA 5580 Adaptive Security Appliance Hardware Installation Guide
Maintenance and Upgrade Procedures

Table Of Contents

Maintenance and Upgrade Procedures

Removing and Replacing the Chassis Cover

Removing the Chassis Cover

Replacing the Chassis Cover

Accessing the Diagnostic Panel

Removing and Installing the Interface Cards

Overview

Removing the Interface Cards

Installing an Interface Cards

Removing and Installing the Power Supply

Removing the Power Supply

Installing the Power Supply

Removing and Installing Fans

Removing the Fan

Installing the Fan

Upgrading the ASA 5580-20 to an ASA 5580-40

Accessing the Processor Memory Module

Installing a Processor

Troubleshooting Loose Connections


Maintenance and Upgrade Procedures


This chapter describes maintenance and upgrade procedures. This chapter includes the following sections:

Removing and Replacing the Chassis Cover

Accessing the Diagnostic Panel

Removing and Installing the Interface Cards

Removing and Installing the Power Supply

Removing and Installing Fans

Upgrading the ASA 5580-20 to an ASA 5580-40

Troubleshooting Loose Connections


Caution The BIOS on the Cisco ASA 5580 chassis is specific to the Cisco ASA 5580 and must only be upgraded under instructions from Cisco with BIOS files obtained from the Cisco website. Installing a non-Cisco or third-party BIOS on the Cisco ASA 5580 voids the warranty.

Removing and Replacing the Chassis Cover

This section describes how to remove and replace the chassis cover from the adaptive security appliance. This section includes the following topics:

Removing the Chassis Cover

Replacing the Chassis Cover


Warning Before working on a system that has an On/Off switch, turn OFF the power and unplug the power cord. Statement 1



Warning This product relies on the building's installation for short-circuit (overcurrent) protection. Ensure that the protective device is rated not greater than 120 VAC, 20 A U.S. (240 VAC, 16-20 A International). Statement 1005



Warning This equipment must be grounded. Never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground conductor. Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available. Statement 1024



Warning Blank faceplates and cover panels serve three important functions: they prevent exposure to hazardous voltages and currents inside the chassis; they contain electromagnetic interference (EMI) that might disrupt other equipment; and they direct the flow of cooling air through the chassis. Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place. Statement 1029



Caution Follow proper safety procedures when removing and replacing the chassis cover by reading the safety warnings in Regulatory Compliance and Safety Information for the Cisco ASA 5580.


Caution Do not operate the Cisco ASA 5580 for long periods with the chassis cover open or removed. Operating it in this manner results in improper airflow and improper cooling that can lead to thermal damage.

Removing the Chassis Cover

To remove the chassis cover, perform the following steps:


Note Removing the chassis cover does not affect Cisco warranty. Upgrading the adaptive security appliance does not require any special tools and does not create any radio frequency leaks.



Step 1 Read the Regulatory Compliance and Safety Information for the Cisco ASA 5580 document.

Step 2 Extend the adaptive security appliance out of the rack if it is rack-mounted..

If the locking latch is locked, use the T-15 Torx screwdriver located on the back of the chassis to unlock it. See Figure 1-2 on page 1-5 to see the location of the T-15 Torx screwdriver. Turn the locking screw a quarter of a turn counterclockwise to unlock it, see Figure 4-1.


Caution Do not operate the adaptive security appliance without the chassis cover installed. The chassis cover protects the internal components, prevents electrical shorts, and provides proper air flow for cooling the electronic components.

Step 3 Lift up the cover latch on the top of the chassis, see Figure 4-1.

Figure 4-1 Unlocking and Lifting the Latch

Step 4 Slide the chassis cover back and up to remove it, see Figure 4-2.

Figure 4-2 Sliding the Chassis Cover


Replacing the Chassis Cover

To replace the chassis cover, perform the following steps:


Step 1 Position the cover on top of the chassis and slide it on. Push down on the cover latch to lock it into place.


Note Make sure the chassis cover is securely locked into place before powering on the adaptive security appliance.


Step 2 Reinstall the adaptive security appliance in a rack, on a desktop, or on a table, or extend it back into the rack.


Accessing the Diagnostic Panel


Note When you remove the chassis cover to view the Diagnostic Panel, leave the adaptive security appliance powered on. Powering off the adaptive security appliance clears the Diagnostic Panel indicators.


To access the Diagnostic Panel, perform the following steps:


Step 1 Extend the adaptive security appliance from the rack..

Step 2 Remove the chassis cover.

For more information, see Removing the Chassis Cover.

Step 3 Locate the Diagnostic Panel (see Figure 1-5 on page 1-9)

For information on what internal health information each indicator displays, see the "Figure 1-5Diagnostic Panel" section on page 1-9. Follow the instructions in this chapter to remove and install failed components. For aid in troubleshooting, use the internal health indicators information when contacting TAC.


Removing and Installing the Interface Cards

The Cisco ASA 5580 series adaptive security appliance has nine expansion card slots. Slots 1 and 2 are PCI-X slots and are reserved for future use. Slots 3 through 9 are PCI Express card slots. All slots are full-height slots. Slot 9 is reserved and is not available for use by network interface cards.

Overview

The adaptive security appliance supports the following interface cards:

4-Port Gigabit Ethernet Copper interface card

Provides four 10/100/1000BASE-T interfaces, which allow up to 24 total interfaces. Figure 3 shows the Gigabit Ethernet interface card.

Figure 3 4-Port Gigabit Ethernet Copper Interface Cards

2-Port 10-Gigabit Ethernet Fiber interface card

Provides two 10000BASE-SX (fiber) interfaces (allowing up to 12 total 10-Gigabit Ethernet fiber interfaces in a fully populated chassis).

The card ports require a multi-mode fiber cable with an LC connector to connect to the SX interface of the adaptive security appliance. Figure 4 shows the 2-Port 10 Gigabit Ethernet fiber interface card.

Figure 4 2-Port 10-Gigabit Ethernet Fiber Interface Cards

4-Port Gigabit Ethernet Fiber interface card

Provides four 10000BASE-SX (fiber) interfaces (allowing up to 24 total Gigabit Ethernet fiber interfaces in a fully populated chassis).

The card ports require a multi-mode fiber cable with an LC connector to connect to the SX interface of the adaptive security appliance.

This section includes the following topics:

Removing the Interface Cards

Installing an Interface Cards


Caution To prevent damage to the Cisco ASA 5580 series adaptive security appliance or the expansion cards, power down the Cisco ASA 5580 series adaptive security appliance and remove all AC power cables before removing or installing expansion cards.

Removing the Interface Cards

To remove the interface cards, perform the following steps:


Step 1 Power off the adaptive security appliance

Step 2 Remove the power cables from the adaptive security appliance.

Step 3 If rack-mounted, extend the adaptive security appliance from the rack.

Step 4 Make sure the adaptive security appliance is in an ESD-controlled environment.

For more information, see the "Preventing Electrostatic Discharge Damage" section on page 2-3.

Step 5 Remove the chassis cover.

For more information, see the "Removing the Chassis Cover" section.

Step 6 To unlock the expansion card slot, push down on the center part of the blue tab and open the latch, see Figure 4-5.

Step 7 To install a card, position the card over the socket, and gently push the card down, see Figure 4-5.

Figure 4-5 Unlocking the Expansion Card Slot and Installing the Card


Installing an Interface Cards

To install the interface cards, perform the following steps:


Step 1 To install a card, position the card so that its connector lines up over the socket on the mother board and push the card down in to the socket. Press down on the outer edge of the blue tab to lock the card into place.


Note To remove the expansion cards, unlock the retaining clip. To install the expansion cards, lock the retaining clip.


Step 2 Replace the chassis cover.

For more information, see Replacing the Chassis Cover.

Step 3 Slide the server back in to the rack by pressing the server rail-release handles.

Step 4 Reconnect the power cables to the Cisco ASA 5580 series adaptive security appliance.

Step 5 Power on the Cisco ASA 5580 series adaptive security appliance.


Removing and Installing the Power Supply

The adaptive security appliance ships with two hot-pluggable power supplies, providing a redundant power supply configuration. You can install or replace either power supply without powering down the adaptive security appliance, as long as one power supply is active and functioning correctly.

For information on power supply considerations including environmental operating ranges and power requirements, see table 8 at the following url:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd802930c5.html


Note Make sure the two power supplies are powered by separate AC power sources so that the adaptive security appliance is always available.


This section describes how to remove and install the power supply in the adaptive security appliance. This section includes the following topics:

Removing and Installing the Power Supply

Installing the Power Supply

Removing the Power Supply

The Power supplies are hot-pluggable. If you are replacing a redundant power supply, you can replace it while the adaptive security appliance is running. If only one power supply is installed, do not remove the power supply unless the adaptive security appliance has been powered off. Removing the only operational power supply causes an immediate power loss.

To remove the power supply, perform the following steps:


Note The following steps apply only if you have one active functioning power supply.



Step 1 Power off the adaptive security appliance.

Step 2 Remove the power cable from the adaptive security appliance.

Step 3 Use the T-15 Torx screwdriver that shipped with the adaptive security appliance to remove the shipping screw, see Figure 4-6. For location of the T-15 Torx screwdriver, see Figure 1-2 on page 1-5.

Step 4 Press the latch, and pull the power supply handle out, see Figure 4-6.

Figure 4-6 Removing the Screw

Step 5 Remove the power supply by pulling it away from the chassis, see Figure 4-7.

Figure 4-7 Pulling the Power Supply Handle


Installing the Power Supply

To install the power supply in the adaptive security appliance, perform the following steps:


Step 1 Align and push the power supply into place, see Figure 4-8.

Figure 4-8 Pushing the Power Supply

Step 2 Lock the power supply handle, see Figure 4-9.

Figure 4-9 Locking the Power Supply Handle

Step 3 Use the T-15 Torx screwdriver to screw the power supply back into place.

Step 4 Reconnect the power cable.

Be sure that the power supply indicator and the front panel health indicators are green.

Step 5 Power on the adaptive security appliance.


Removing and Installing Fans

There are six fans in the Cisco ASA 5580 series adaptive security appliance. For the fan locations, see Figure 1-4 on page 1-8. The Cisco ASA 5580 series adaptive security appliance supports redundant hot-pluggable fans in a 5 + 1 configuration to provide proper airflow. This section describes how to install and remove the fans in the Cisco ASA 5580 series adaptive security appliance. This section includes the following topics:

Removing the Fan

Installing the Fan

Figure 4-10 shows the fan, its connector, and its indicator.

Figure 4-10 Fan, Connector, and Indicator

The fan indicators provide the following information:

Green—Operating normally

Amber—Failed

Off— No power

Removing the Fan

To remove fans in the adaptive security appliance, perform the following steps:


Step 1 Extend the chassis from the rack..

Step 2 Remove the chassis cover. For more information, see Removing the Chassis Cover

Step 3 Identify the failed fan by locating an amber indicator on top of the failed fan or a lighted FAN X indicator on the Diagnostic Panel.

For more information about the Diagnostic Panel, see Figure 1-5 on page 1-9.

Step 4 To remove the fan, grasp the red plastic handle and pull the handle up, see Figure 4-11.


Note Remove and replace one fan at a time.


Figure 4-11

Removing the Fan


Installing the Fan

To install fans in the adaptive security appliance, perform the following steps:


Step 1 To install a new fan, position the fan over the slot so that the connector below the fan indicator lines up with the connection on the motherboard (for the location of the connector, see Figure 4-10).

Step 2 Push down until the fan clicks into place.

Step 3 Check to make sure the indicator on each fan is green.


Note If the front panel internal system health indicator is not green after you install a fan, reseat the fan.


Step 4 Replace the chassis cover.

Step 5 Slide the adaptive security appliance back in to the rack by pressing the rail-release handles.


Upgrading the ASA 5580-20 to an ASA 5580-40


Note When you purchase the appropriate user upgrade license, you will receive a Product Activation Key (PAK) when the order is fulfilled. Per the enclosed instructions, you should visit http://www.cisco.com/go/license, where you will be prompted to enter your contact information and PAK number along with the serial number of your module. The software on the Content Security Edition module will be enabled for the new user count and/or Plus functionality automatically and transparently the next time it checks for updates.


The adaptive security appliance supports operation in a two or four-processor configuration. The adaptive security appliance supports un functions through the processor installed in processor socket 1.

The adaptive security appliance power modules provide proper power to each processor. Each power module must be installed in the slot adjacent to its processor.


Note Always upgrade the license first before adding new processors. After upgrading the license, you must reboot the chassis. If you fail to reboot or reboot without adding new processors after upgrading your license, the chassis will continue to operate as an ASA 5580-20 adaptive security appliance.


Accessing the Processor Memory Module

The processors and the power modules are stored in a module at the front of the adaptive security appliance. Access to this module is provided through the front panel, eliminating the need to extend the adaptive security appliance from the rack to install or replace the processors.

To remove the processor module, perform the following steps:


Step 1 Power off the adaptive security appliance.

Step 2 Use a grounding strap. For more information, see the "Preventing Electrostatic Discharge Damage" section on page 2-3.

Step 3 Release the latches on the lever, see Figure 4-12.

Step 4 Lower the handle, and pull the module out of the adaptive security appliance until the release latches catch, see Figure 4-12.

Figure 4-12 Releasing the Latch and Lowering the Handle

Step 5 Firmly holding the module, press the release buttons and pull the module out of the adaptive security appliance, see Figure 4-13.

Figure 4-13 Release Button Location

1

Release buttons

2

Module


Step 6 Remove the fans installed in the cover of the module by grasping the red plastic handle and pulling the handle up, see Figure 4-14.

Figure 4-14 Removing the Fan and Releasing the Latch

Step 7 Release the latch, and open the cover, see Figure 4-14.


Installing a Processor


Caution To avoid damage to the adaptive security appliance and system board, only authorized personnel should attempt to replace or install the processor in this adaptive security appliance.


Caution To prevent possible malfunction and damage to the equipment, multiple processors installed in the adaptive security appliance must have the same part number.


Caution Processor and processor power module sockets 1 and 2 must be populated at all times or the adaptive security appliance will not function properly.


Caution To help avoid damage to the processor and system board, use the processor installation tool to install the new processor.


Caution Use caution when installing the processor memory module or removing the processor memory module; when fully populated, it can weigh up to 30 pounds.

To install a processor, perform the following steps:


Step 1 Open the heatsink retaining bracket, see Figure 4-15.

Figure 4-15 Opening the Heatsink Bracket


Caution The pins on the processor socket are very fragile. Any damage to them may require replacing the system board.

Step 2 Remove the processor socket protective cover, see Figure 4-16. Retain the cover for future use.

Figure 4-16 Removing the Processor Socket Protective Cover


Caution Failure to completely open the processor locking lever prevents the processor from seating during installation, leading to hardware damage.

Step 3 Rotate the latch and open the retaining bracket, see Figure 4-17.

Figure 4-17 Rotating the Latch and Opening the Retaining Bracket


Caution Be sure the processor remains inside the processor installation tool.

Step 4 If the processor has separated from the installation tool, carefully reinsert the processor in the tool, see Figure 4-18.

Figure 4-18 Reinsert the Processor in the Tool

Step 5 Align the processor installation tool with the socket and install the processor, see Figure 4-19.


Caution The processor is designed to fit one way into the socket. Use the alignment guides on the processor and socket to properly align the processor with the socket.

Figure 4-19 Aligning and Installing the Processor

Step 6 Press down firmly until the processor installation tool clicks and separates from the processor, and then remove the processor installation tool, see Figure 4-20.

Figure 4-20 The Processor Installation Tool

Step 7 Close the processor retaining bracket and the processor retaining latch, see Figure 4-21.

Figure 4-21 Closing the Processor Retaining Bracket and Retaining Latch.

Step 8 Remove the heatsink cover.


Caution After the cover is removed, do not touch the thermal interface media.

Step 9 Install the heatsink, you must press hard to clamp it down, see Figure 4-22.

Figure 4-22 Installing the Heatsink

Step 10 Close the heatsink retaining bracket, see Figure 4-23.

Figure 4-23 Closing the Heatsink Retaining Bracket

Step 11 Install the processor power module. The processor power module is keyed and the key must be aligned when installed, see Figure 4-24.


Note Always install a processor power module when you install a processor. The system fails to boot if the corresponding processor power module is missing.


Figure 4-24 Installing the Processor Power Module

Step 12 Install the memory module into the adaptive security appliance. The four memory modules should be installed in slots 17I, 18I, 25M, and 26M, see Figure 4-25.


Note Memory location before upgrading are 1A, 2A, 3B, 4B 9E, 10E, 11F, 12F.


Figure 4-25 DIMM slot identification

Step 13 Close the processor memory module cover, see Figure 4-26.

Figure 4-26 Closing the Module Cover

Step 14 Install the fan by positioning the fan over the slot so that the connector below the fan indicator lines up with the connection on the motherboard. Push down until the fan clicks into place.

Step 15 Power on the adaptive security appliance.


Troubleshooting Loose Connections

Perform the following actions to troubleshoot loose connections on the ASA 5580 adaptive security appliance:

Make sure all power cords are securely connected.

Make sure all cables are properly aligned and securely connected for all external and internal components.

Remove and check all data and power cables for damage. Make sure no cables have bent pins or damaged connectors.

Make sure each device is properly seated.

If a device has latches, make sure they are completely closed and locked.

Check any interlock or interconnect indicators that indicate a component is not connected properly.

If problems continue, remove and reinstall each device, checking the connectors and sockets for bent pins or other damage.