Cisco ASA 5585-X Hardware Installation Guide - Installing the Cisco ASA 5585-X [Cisco ASA 5500 Series Next Generation Firewalls]

Table Of Contents

Installing the Cisco ASA 5585-X

Installing the Cisco ASA 5585-X

The ASA 5585-X has two dedicated Gigabit Ethernet interfaces for device management that are called Management 0/0 and Management 0/1. The management interfaces are similar to the console port, because they only accept traffic that is destined to-the-box (versus traffic that is through-the-box).

If you install an IPS SSP or ASA CX SSP, you can connect a cable to the IPS SSP or ASA CX SSP Management 1/0 port to have remote management and monitoring of the IPS SSP or ASA CX SSP. It is not required, but if you do not connect to the Management 1/0 port, you will have to session to the IPS SSP or ASA CX SSP from the ASA 5585-X to gain access to the it. Without directly connecting to the IPS SSP or ASA CX SSP, you cannot manage or monitor it over the network.

Depending on your configuration, you can configure any interface to be a management-only interface using the management-only command. You can also disable management-only configuration mode on the management interface. For more information about this command, see the management-only command in the Cisco ASA 5580 Adaptive Security Appliance Command Reference.

To connect the ASA 5585-X cables to the network interfaces, follow these steps:

Step 1 Place the ASA 5585-X on a flat, stable surface, or in a rack (if you are rack-mounting it).

Step 2 Connect to the management interface, Management 0/0.

a. Locate an Ethernet cable, which has an RJ-45 connector on each end.

b. Connect one RJ-45 connector to the Management 0/0 interface.

c. Connect the other end of the Ethernet cable to the Ethernet port on your computer or to your management network.

Caution Management and console ports are privileged administrative ports. Connecting them to an untrusted network can create security concerns.

Step 3 (Optional) Connect to the SSP console port if you want to use the ASA CLI. Connect to the IPS SSP or ASA CX SSP console port if you want to use the IPS or ASA CX SSP CLI.

Use the console port to connect to a computer to enter configuration commands.

a. Before connecting a computer or terminal to any ports, determine the baud rate of the serial port. The baud rate of the computer or terminal must match the default baud rate (9600 baud) of the console port of the adaptive security appliance.

Set up the terminal as follows: 9600 baud (default), 8 data bits, no parity, 1 stop bits, and Flow Control (FC) = Hardware.

Note The console port settings are the same for the SSP, IPS SSP, and ASA CX SSP.

b. Connect the RJ-45 to the console port and connect the other end to your computer.

Step 4 (Optional) Connect to the SFP/SFP+ port if you are using fiber ports.

The ASA 5585-X SSP-10 and SSP-20 have two SFP/SFP+ ports. The ASA 5585-X SSP-40 and SSP-60 have four SFP/SFP+ ports.

If you are using the fiber ports, you need an SFP+ module for 10-Gigabit Ethernet (a license may be required) or an SFP module for 1-Gigabit Ethernet (SFP or SFP+ modules are not included).

a. Install the SFP/SFP+ module.

b. Connect one end of the LC cable to the SFP/SFP+.

c. Connect the other end of the LC cable to a network device, such as a router or switch.

Step 5 Install the electrical cables.

a. Attach the power cable to the power supply module on the back of the ASA 5585-X.

b. If you have redundant power supply modules, you must connect both power cables to the back of the ASA 5585-X.

1

Power supply module (PS0)

2

Power supply module (PS1)

c. Plug the power cable(s) in to a power source (we recommend a UPS).

Step 6 Power on the ASA 5585-X.

Caution If the appliance is subjected to environmental overheating, it shuts down and you must manually power cycle it to turn it on again.

Step 7 Check the PWR indicator on the front panel of the ASA 5585-X to verify interface connectivity. It should be green. To verify power supply operation, check the PS0 and PS1 indicators on the front panel. They should be green. On the back panel of the ASA 5585-X, make sure the IN OK and the FAN OK indicators are green and the OUT FAIL indicator is off.