Manuale d’uso / di manutenzione del prodotto ASA5545-K8 del fabbricante Cisco
Vai alla pagina of 76
Cisco Systems, Inc. www.cisco.com Cisco has more than 200 offices worldwide. Addresses, phone numbers, and fax numbers are listed on the Cisco we bsite at www.
THE SPECIFICATION S AND INFORMAT ION REGARDING THE PRODUCTS IN THIS MA NUAL ARE SUBJ ECT TO CHANGE WITHOUT NOT ICE. ALL STATEMENTS , INFORMATION , AND RECOMMEN DATIONS I N THIS MANUA L ARE BELIEVE D TO BE ACCURATE BUT ARE PRESENTED WI THOUT WARRANTY OF ANY KIND, EX PRESS OR IMPLIED.
1 Cisco ASA 5500-X Series Hardware Installation Guide OL-32129-01 CONTENTS About This Guide vii Contents vi i Document Objectives vii Document Conventions vii Installation Warnings viii Where to Find .
Contents 2 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 CHAPTER 2 Preparing for Installation 2-1 Installation Overview 2-1 Safety Recommendation s 2-1 Maintain ing Safety w ith Ele.
Contents 3 Cisco ASA 5500-X Series Hardware Installation Guide OL-32129-01 Installing and Removing SSDs 4-22.
Contents 4 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01.
1 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 About This Guide Released: February 28, 2012 Updated: September 18, 2014 This guide describes how to in stall and maintain the Cisco ASA 5500-X seri es appliances.
2 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 About This Guid e Document Conv entions Note Means reader take note . Ti p Means the following informatio n will help you solve a pr oblem . Caution Means re a d e r b e c a re f u l .
3 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 About This Guide Document Conventions • Circuit Breaker (15A) W arning, page 5 • 48 VDC Po wer System, page 5 • Grounded Equip.
4 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 About This Guid e Document Conv entions filled rack, load the rack from the bottom to the top with the he aviest component a t the bottom of the rac k.If the rack is provided w ith stabilizi ng devices, insta ll the stabilizers be fore mounti ng or servicing the unit in the rack.
5 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 About This Guide Document Conventions Multiple Power Cords War ni n g This unit has more than one power cord . T o reduce the risk of electric shock when servicing a unit, disconnect the power cord of the power strip into which t he unit is plugged.
6 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 About This Guid e Obtaining Documenta tion and Submitting a Service Request Obtaining Documentation and Submitting a Service Request .
CH A P T E R 1-1 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 1 About the ASA 5500-X This chapter describes t he Cisco ASA 5512-X, 551 5-X, 5525-X, 5545- X, and 5555-X models. W e recommend that you read this entire guide before be ginning any of the procedu res contained herein.
1-2 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 1 About the ASA 5500-X Package Contents ASA 5512-X, ASA 5515-X, or ASA 5525-X ASA 5545-X and ASA 5555-X 1 ASA 5512-X, ASA 5.
1-3 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 1 About the ASA 5500-X Internal and External USB Flash Drives Internal and External USB Flash Drives The Cisco ASA 5500-X has internal and (o ptional) ext ernal USB dri ves.
1-4 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 1 About the ASA 5500-X Solid State Drives Solid State Drives Y ou must install a Cisco Solid State Dri ve (SSD) for use with the some softw are modules. Only Ci sco SSDs are supported.
1-5 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 1 About the ASA 5500-X SFP Modules SFP Modules The ASA uses fiel d-replaceable small form-f actor pluggable (SFP) module s to establish Gigabit Ethernet connections. Ta b l e 1 - 1 lists the support ed SFP modules.
1-6 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 1 About the ASA 5500-X SFP Modules T able 1 -2 Cabling Requirements f or Fiber -optic SFP Mo dules SFP Module Wavelength Fiber T ype Core Size Modal Bandwidth (MHz-km) 1 1. Specified at transmission wavelength.
1-7 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 1 About the ASA 5500-X ASA Chassis Panels ASA Chassis Panels This section describes the fro nt and rear ASA panels, and in.
1-8 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 1 About the ASA 5500-X ASA Chassis Panels 3 Alarm System operat ing statu s: • Off—Nor mal operating system function. • Solid amber—Critical Alar m indicating one o r more of the follo wing: – a major failure of a hard ware or softw are component.
1-9 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 1 About the ASA 5500-X ASA Chassis Panels Figure 1-2 sho w s the front pane l LEDs for the ASA 5545-X an d ASA 5555- X models.
1-10 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 1 About the ASA 5500-X ASA Chassis Panels Rear Panel LEDs Figure 1-3 sho ws the rea r panel LEDs for the ASA 5500-X. Figur e 1 -3 Rear P anel LEDs f or ASA 5500-X 7 VPN VPN tunnel status: • Solid green—VPN tun nel is established.
1-11 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 1 About the ASA 5500-X ASA Chassis Panels LED Description 1 Pow er Pow er supply status: • Off—Po wer supply off.
1-12 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 1 About the ASA 5500-X ASA Chassis Panels Rear Panel Ports Figure 1-4 sho ws the ports for the ASA 5512-X and ASA 5515-X mod els. Figure 1 -4 Rear Panel P orts for the ASA 5512-X and ASA 5515-X .
1-13 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 1 About the ASA 5500-X ASA Chassis Panels Figure 1-6 sho ws the rear panel ports for the ASA 5545-X and AS A 5555-X. Figure 1 -6 Rear Panel P orts for the AS A 5545-X and ASA 5555-X 3 GigabitE thernet d ata interfaces (0/0 throu gh 0/7) The 8 on-board data interf aces .
1-14 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 1 About the ASA 5500-X Power Supply Power Supply The ASA 5512-X, A SA 5515-X, and A SA 5525-X ship wit h one f ixed fan and one fi xed po wer supply (A C or DC) installed. The ASA 5545-X and ASA 5555-X ship with o ne po wer supply (A C or DC) installed.
1-15 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 1 About the ASA 5500-X Power Supply AC and DC Support The ASA supports the foll ow ing po wer supplies: • A C power supply—Pro vides 400 watt output po wer with two DC v oltage outputs: +12 V an d +5 V .
1-16 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 1 About the ASA 5500-X Hardware Specifications Ta b l e 1 - 3 describes the power sup ply indicator . The function of the indicator is the same for both the A C and DC po wer supplies.
1-17 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 1 About the ASA 5500-X Hardware Specifications For additional specifications, see the pr oduct data sheet at the follo w ing URL: http://www .cisco.com/c/en/us/prod ucts/collateral/security/asa-5500 -x-series-ne xt-generation-f irew alls/data-sheet-c78-729807.
1-18 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 1 About the ASA 5500-X Hardware Specifications.
CH A P T E R 2-1 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 2 Preparing for Installation The information in th is guide applies to the follo wing Cisco ASA 550 0-X Series models: ASA 5512-X, 5515-X, 5525-X, 5545- X, and 5555-X.
2-2 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 2 Preparing for Installatio n Maintaining Safe ty with Electricity Maintaining Safety with Electricity War ni n g Before working on a chassis o r working near power supplies, unp lug the power cord on AC units; disconnect the power at the circuit breaker on DC units.
2-3 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 2 Pre paring for Installation General Site Requireme nts General Site Requirements The topics in this sect ion describe the requi rements your site must meet fo r safe installation and operation of your system.
2-4 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 2 Preparing for Installatio n General Site Requirements • Se veral styles of A C-input po wer supply cords are av ailable; make sure that you have the correct style for your site.
2-5 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 2 Pre paring for Installation General Site Requireme nts Configuring Equipment Racks The follo wing tips help you plan an acceptable equipment rack configuration: • Enclosed racks must ha ve adequate ventilation .
2-6 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 2 Preparing for Installatio n General Site Requirements.
CH A P T E R 3-1 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 3 Installing and Connecting the ASA 5500-X This chapter describes ho w to rack-mount the ASA and connect the interface cables.
3-2 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 3 In stalling and Connectin g the ASA 5500-X Rack Mount the Chassis • If the rack is partially f illed, load the rack from the botto m to the top, with the hea viest component at the bottom of the rack.
3-3 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 3 Installing and Connecting the ASA 5500-X Rack Mount the Chassis Step 2 W e recommend that you install the chassis with the front bezel facing the cold aisle. (See Figure 3-3 for an example of air flo w from front to back .
3-4 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 3 In stalling and Connectin g the ASA 5500-X Rack Mount the Chassis Rack Mount the ASA 5500-X Chassis with Slide Rail Mounting System The slide rail mounting system pro vides a quick, con venient, and secure method for rack moun ting the chassis.
3-5 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 3 Installing and Connecting the ASA 5500-X Rack Mount the Chassis Step 3 Install a die-c ast bracket to either side of the.
3-6 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 3 In stalling and Connectin g the ASA 5500-X Rack Mount the Chassis Before You Begin • V erify the box contents • V e rify the rack type The slide rails are pre-assembled for square hole racks.
3-7 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 3 Installing and Connecting the ASA 5500-X Rack Mount the Chassis Procedure Step 1 Disa ssemble the slide rail.
3-8 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 3 In stalling and Connectin g the ASA 5500-X Rack Mount the Chassis b. Use a Phillips screwdri ver to secure the inner slide rail with one Phill ips flat-head scre w (B). c. Secure the other inner slide rail to the chassis by repeating the pre vious steps on this page.
3-9 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 3 Installing and Connecting the ASA 5500-X Rack Mount the Chassis d. Align the round hole insert (C) or th readed hole brack et (D) to the front of the rail ov er the hooks.
3-10 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 3 In stalling and Connectin g the ASA 5500-X Rack Mount the Chassis Step 4 Attach the outer slide rail to the rack. Note W e recommend that you install the chassis w ith the front bezel facing the cold aisle.
3-11 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 3 Installing and Connecting the ASA 5500-X Rack Mount the Chassis c. For Threaded Ho le Racks Onl y: – Align the slide rail to the fro nt rack post. Secure it with tw o of the inclu ded Phillips pan-head scre ws (F).
3-12 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 3 In stalling and Connectin g the ASA 5500-X Connecting Cables, Turning on Powe r, and Verifying Co nnectivity b. Pull the side release tabs to unlock t he inner slide rail, and push the chassis assembly into the rack.
3-13 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 3 Installing and Connecting the ASA 5500-X Connecting Cable s, Turning on Power, and Verifying Co nnectivity Caution Be s.
3-14 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 3 In stalling and Connectin g the ASA 5500-X Connecting Cables, Turning on Powe r, and Verifying Co nnectivity a. Management 0/0 interf ace—For use with ASDM or CLI (wi th additional co nf iguration).
CH A P T E R 4-1 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 4 Maintenance and Upgrade Procedures for the ASA 5500-X Before performing an y of the procedures descri bed in thi s chapter , be sure to read the Re gulatory Compliance and Safety Informa tion for the Cisco ASA 5500-X Series do cument at: http://www .
4-2 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 4 Mainten ance and Upgrade Procedures for the ASA 5500-X Remove and Replace th e Chassis Cover Note Remo ving the chassis cov er does not affect yo ur Cisco warranty . Upgrading the ASA does not require any special t ools and does not create an y radio frequenc y leaks.
4-3 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 4 Maintenance and Upgrade Procedures for the ASA 5500-X Install an Expansion I/O Card Figure 4-2 Replacing the Chassis Co ver Step 3 Re-install the chassis on a rac k. Step 4 Re-install the network interf ace cables.
4-4 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 4 Mainten ance and Upgrade Procedures for the ASA 5500-X Install an Expansion I/O Card Figur e 4-3 I/O Card Location Caution Y o u must disconnect the bl ue Rege x fle xible circuit co nnector from the motherb oard before removi ng the I/O card from the chassis.
4-5 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 4 Maintenance and Upgrade Procedures for the ASA 5500-X Install an Expansion I/O Card Step 7 Disc onnect the blue Regex cable co nnector from the motherboar d by li fting carefully b ut firmly .
4-6 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 4 Mainten ance and Upgrade Procedures for the ASA 5500-X Install an Expansion I/O Card Figur e 4-6 Lift the I/O Car d Upwar d to Release it Step 9 Insert the new I/O card into the chassis.
4-7 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 4 Maintenance and Upgrade Procedures for the ASA 5500-X Install an Expansion I/O Card Step 10 Connect the blue connector end of t he Rege x ribbon cable t o the motherboard, and clos e the green tab .
4-8 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 4 Mainten ance and Upgrade Procedures for the ASA 5500-X Install an Expansion I/O Card Note Y ou must disconnect the blue Re gex flexibl e circuit connecto r from the motherboard before removing the I/O card from the chassis.
4-9 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 4 Maintenance and Upgrade Procedures for the ASA 5500-X Install an Expansion I/O Card Figur e 4-1 0 Removing the Regex Cab.
4-10 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 4 Mainten ance and Upgrade Procedures for the ASA 5500-X Install an Expansion I/O Card Step 9 Inse rt the new I/O card into the chassis. (See Figure 4-12 .) The I/O card holder f i ts properly if the follo wing criteria are met: a.
4-11 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 4 Maintenance and Upgrade Procedures for the ASA 5500-X Install and Remove SFP Module s Step 11 Close the green connector clamp. Step 12 Install the chassis cover , and replace the chassis in the rack.
4-12 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 4 Mainten ance and Upgrade Procedures for the ASA 5500-X Install and Remove SFP Modules Caution Protect your SFP modules by inserting clean dust plugs into the SFPs afte r the cables are extracted fr om them.
4-13 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 4 Maintenance and Upgrade Procedures for the ASA 5500-X Install and Remove SFP Module s Remove the SFP Module SFP modules use v arious latch designs to secure the SFP modules in the SFP ports.
4-14 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 4 Mainten ance and Upgrade Procedures for the ASA 5500-X Remove and Inst all the Power Supply Remove and Install the Power Supply This section descri bes ho w to remov e and install po wer supply modules.
4-15 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 4 Maintenance and Upgrade Procedures for the ASA 5500-X Remove and Install th e Power Supply Figure 4-16 Rem oving the Slot Cov er Step 2 If you are replacing a po wer supply , follo w these s teps: a.
4-16 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 4 Mainten ance and Upgrade Procedures for the ASA 5500-X Remove and Inst all the Power Supply Step 4 Connec t the po wer cable. If you are installing two po wer suppli es for a redundant conf iguration, plug each one into a power source (we recommend a UPS).
4-17 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 4 Maintenance and Upgrade Procedures for the ASA 5500-X Remove and Install th e Power Supply War ni n g This product relies on the building’ s installation for short-circuit (overcurrent) protection.
4-18 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 4 Mainten ance and Upgrade Procedures for the ASA 5500-X Remove and Inst all the Power Supply Before You Begin • The color coding of the DC input po wer supply leads depend s on the color coding of th e DC po wer source at your site.
4-19 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 4 Maintenance and Upgrade Procedures for the ASA 5500-X Remove and Install th e Power Supply Figur e 4-23 Color -coded Wir es Figure 4-24 sh ow s the DC po wer supply with lead wi res.
4-20 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 4 Mainten ance and Upgrade Procedures for the ASA 5500-X Remove and Inst all the Power Supply Step 9 Us e a tie wrap to secure the wires coming from the powe r supply to the rack so that the wires cannot be pulled from the po wer supply by casual contact.
4-21 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 4 Maintenance and Upgrade Procedures for the ASA 5500-X Remove and Install th e Power Supply Figure 4-26 Rem oving the Slot Cov er Step 6 If you are r eplacing a p ow er supply , follo w these st eps: a.
4-22 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 4 Mainten ance and Upgrade Procedures for the ASA 5500-X Install and Remove a Solid S t ate Drive for a Servic es Module F.
4-23 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 4 Maintenance and Upgrade Procedures for the ASA 5500-X Install and Remove a Solid State D rive for a Se rvices Module Install and Remove SSDs The SSD is hot-swappable. The SSD resides in a carrier , which you install int o the dri ve bay .
4-24 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 4 Mainten ance and Upgrade Procedures for the ASA 5500-X Install and Remove a Solid S t ate Drive for a Servic es Module F.
4-25 Cisco ASA 5500-X Series Hard ware Installati on Guide OL-32129-01 Chapter 4 Maintenance and Upgrade Procedures for the ASA 5500-X Install and Remove a Solid State D rive for a Se rvices Module If you replaced the dri ves in the ASA 5545-X and ASA 5555-X, the ASA rebuil ds the data on the SSD because it is in RAID1 conf iguration.
4-26 Cisco ASA 5500-X Series Hard ware Installation Guide OL-32129-01 Chapter 4 Mainten ance and Upgrade Procedures for the ASA 5500-X Install and Remove a Solid S t ate Drive for a Servic es Module.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il Cisco ASA5545-K8 è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del Cisco ASA5545-K8 - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso Cisco ASA5545-K8 imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul Cisco ASA5545-K8 ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il Cisco ASA5545-K8, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del Cisco ASA5545-K8.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il Cisco ASA5545-K8. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo Cisco ASA5545-K8 insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
