background image

C H A P T E R

 

4-1

Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide

OL-22567-02 

4

Maintenance and Upgrade Procedures

This chapter describes maintenance and upgrade procedures, and includes the following sections:

Removing and Installing SSPs, page 4-1

Removing and Installing SSP Hard Disk Drives, page 4-4

Installing and Removing Cisco ASA 5585-X Network I/O Modules, page 4-5

Removing and Installing the Power Supply Module, page 4-11

Removing and Installing the Fan Module, page 4-27

Installing a Slide Rail Kit, page 4-29

Installing and Removing a Slide-mounted Chassis, page 4-30

Mounting the Chassis Using a Fixed Rack Mount, page 4-39

Installing the Cable Management Brackets, page 4-41

Troubleshooting Loose Connections, page 4-43

Removing and Installing SSPs

The ASA 5585-X comes with a core Security Services Processor (SSP) already installed (SSP-10, 
SSP-20, SSP-40, or SSP-60). You can install an additional SSP (core SSP, IPS SSP, ASA CX SSP, or 
FirePOWER SSP) in slot 1.

For a matrix describing which module configurations are allowed, see the 

ASA Module Compatibility

 

table. 

Note

Feature limitations may apply to dual SSPs. Refer to your configuration guide for more information. 

The add-on SSP will not run without the core SSP installed. The add-on SSP must be installed in the 
upper slot (slot 1), with the core SSP in the bottom slot (slot 0). You must power off the ASA 5585-X to 
remove and install SSPs; the SSPs are not hot-swappable.

Summary of Contents for ASA 5585-X

Page 1: ... Using a Fixed Rack Mount page 4 39 Installing the Cable Management Brackets page 4 41 Troubleshooting Loose Connections page 4 43 Removing and Installing SSPs The ASA 5585 X comes with a core Security Services Processor SSP already installed SSP 10 SSP 20 SSP 40 or SSP 60 You can install an additional SSP core SSP IPS SSP ASA CX SSP or FirePOWER SSP in slot 1 For a matrix describing which module ...

Page 2: ... write memory If you are using a management application such as ASDM or CSM to manage this ASA 5585 X you also can use that application to save the configuration Step 4 Power off the ASA 5585 X Step 5 Remove the power cable from the ASA 5585 X Step 6 If you are installing an add on SSP for the fist time loosen the captive screws on the upper left and right of the slot tray slot 1 and remove it Sto...

Page 3: ...on levers into place Step 12 Insert and tighten the captive screws Step 13 Reconnect the power cable to the ASA 5585 X Step 14 Power on the ASA 5585 X Step 15 Press Enter to confirm Step 16 Verify that the PWR indicator on the front panel is green 1 Module 2 Ejection levers 1 Module 2 Ejection levers PWR BOOT ALARM ACT VPN PS1 HDD1 PS0 HDD0 USB RESET 0 SFP1 SFP0 1 0 1 2 3 4 5 6 7 MGMT 0 1 AUX CONS...

Page 4: ...r DC power supply Each hard disk drive is shipped in a carrier as shown in Figure 4 1 Figure 4 1 SSP Hard Disk Drive in Carrier Caution Make sure that you replace the failed hard disk drive as soon as possible otherwise if the remaining hard disk drive fails all data is lost To remove and install a hard disk drive in the SSP follow these steps Step 1 From the front panel of the SSP remove the hard...

Page 5: ...585 X 8 port 10 G Network I O Module Cisco ASA 5585 X 20 port 1 G Network I O Module The network I O module is not hot swappable so you must power off the ASA 5585 X before installing or removing the module You must have a Phillips head screwdriver to install the slot divider that divides slot 1 into two bays The ports are numbered right to left with port 0 being the far right port and the far lef...

Page 6: ...ng for the 4 port network I O module Figure 4 2 4 Port Network I O Module Port Numbering Figure 4 3 shows the port numbering for the 8 port network I O module Figure 4 3 8 Port Network I O Module Port Numbering 1 TenGigabitEthernet 00 through 03 2 3 1 0 Cisco ASA 4 Port 10GE Network Module STATUS EJECT PWR 1 332446 1 TenGigabitEthernet 00 through 07 2 3 1 0 6 7 5 4 STATUS EJECT PWR Cisco ASA 8 Por...

Page 7: ...ation Table 4 1 lists the SFP SFP transceiver modules supported by the ASA 5585 X 1 GigabitEthernet 00 through 07 2 GigabitEthernet 08 through 19 8 9 10 11 12 13 14 15 16 17 18 19 6 7 4 5 2 3 0 1 Cisco ASA 5585 X 20 Port GE Module PWR STATUS EJECT 1 2 332446 Table 4 1 SFP SFP Transceiver Modules 1G SFP Module GLC SX MM 1000 Base SX SFP module GLC SX MMD 1000BASE SX short wavelength with DOM GLC LH...

Page 8: ...ng Because invisible laser radiation may be emitted from the aperture of the port when no cable is connected avoid exposure to laser radiation and do not stare into open apertures Statement 70 To install a 4 8 or 20 port network I O module and related SFP SFP transceivers into the ASA 5585 X Step 1 Power off the security appliance Caution Network I O modules are not hot swappable Step 2 Locate a g...

Page 9: ...e and sliding it in until it is seated Tighten the captive screw with a Phillips head screwdriver Figure 4 6 Figure 4 6 Installing the Slot Divider Step 5 Install a network I O module by lining it up with either the left or the right bay of slot 1 making sure the ejection levers are extended Figure 4 7 and Figure 4 8 on page 4 10 1 Empty slot tray PWR BOOT ALARM ACT VPN PS1 HDD1 PS0 HDD0 USB RESET...

Page 10: ... must install slot covers on all empty slots to maintain the proper air flow This also prevents EMI which can disrupt other equipment Step 9 Install a SFP SFP transceiver by aligning it with the I O module port and sliding it into the port slot until it locks into position Figure 4 9 Caution Do not remove the optical port plugs from the SFP SFP until you are ready to connect the cabling 1 4 or 8 p...

Page 11: ... of the LC cable to a network device such as a router or a switch Step 12 After connecting all necessary cables power on the security appliance Step 13 Verify that the PWR indicator on the front panel is green Removing and Installing the Power Supply Module This section describes how to remove and install power supply modules in the ASA 5585 X and includes the following topics AC DC Power Supply M...

Page 12: ... a second AC power supply module in any of these models to create a redundant power supply configuration If you already have two AC power supply modules installed you can install or replace either power supply module without powering off the appliance as long as one power supply module is active and functioning correctly If only one power supply module is installed do not remove the power supply m...

Page 13: ... the appliance is subjected to environmental overheating it shuts down and you must manually power cycle it to turn it on again Cisco ASA 1200W AC 100 240V 15 0 8 0 A 56 60Hz I N O K F A N O K O U T F A I L 253905 1 2 3 Table 4 3 AC Power Supply Module Indicators Figure Label Indicator Description 1 IN OK Status of the power supply module Off No AC power cord connected or AC power switch is off Gr...

Page 14: ...ecurity appliance unplug the power supply module cable Step 3 On the back of the security appliance loosen the captive screws from the power supply module Figure 4 12 Figure 4 12 Removing the AC Power Supply Module Step 4 Remove the power supply module by grasping the handle and pulling the power supply module away from the chassis 1 Power supply module and power supply module handle 2 Power suppl...

Page 15: ...r off the security appliance because you are removing and replacing the only power supply module power it back on Step 9 Check the PS0 and PS1 indicators on the front panel to make sure they are green On the back panel of the security appliance make sure the IN OK and the FAN OK indicators are green and the OUT FAIL indicator is off see Figure 4 11and Table 4 3 1 Power supply module and power supp...

Page 16: ...her DC power supply module assumes the full load until the failed power supply module is replaced To maintain air flow both bays must be populated by two DC power supply modules You can install or replace either power supply module without powering off the appliance as long as one power supply module is active and functioning correctly Note Only the ASA 5585 X SSP 60 supports either two AC or two ...

Page 17: ...AC power with DC power remove both modules from the appliance fan module and power supply module or both power supply modules as shown in Step 1 through Step 4 in Removing and Installing an AC Power Supply Module page 4 13 Continue with Step 2 b If you are replacing a failed DC power supply module with a new DC power supply module follow the steps in Removing the DC Power Supply Module page 4 24 a...

Page 18: ...ushing it into place until it is seated Figure 4 16 Figure 4 16 Installing the DC Power Supply Module Step 3 Tighten the captive screws Step 4 Repeat Steps 2 and 3 to install the second power supply module Note You must have two DC power supply modules installed at all times Step 5 Connect DC power source by following the steps in Connecting DC Power to the ASA 5585 X page 4 19 1 Power supply modu...

Page 19: ...nd in the barrel to allow the source DC cables to exit the terminal block Source DC ground wire lugs with the following requirements A single hole that can accommodate the 4 mm ground post Either a straight or bent barrel Note The source DC cable and the terminal block lugs should be sized according to local and national installation requirements and electrical codes Use only copper wire We recomm...

Page 20: ...rminals Always replace cover when terminals are not in service Be sure uninsulated conductors are not accessible when cover is in place Statement 1075 More Information For the procedure for connecting the system ground see Establishing the System Ground page 3 1 Connecting the DC Power Supply To connect source DC to the DC input power supply follow these steps Step 1 Set the power switch or circui...

Page 21: ...urce DC cables Step 7 Attach the source DC ground wire lug to the source DC ground wire Step 8 Connect the source DC cables to the terminal block in this order Figure 4 18 on page 4 22 Position the ground cable lug on the power supply ground terminal post Slide the lock washer over the ground post and tighten the nut to secure the source DC ground wire Do not over tighten the nut see Table 4 5 Pos...

Page 22: ...rminal block Figure 4 18 Attaching the Source DC Cables to the Power Supply Module Step 9 Route the two source DC cables out of the terminal block position the terminal block cover over the terminal block and snap the cover into place Figure 4 19 on page 4 23 Make sure that both the top and the bottom clips on the terminal block cover have fully engaged the tabs on the terminal block Caution To pr...

Page 23: ...move any safety flag and lockout devices or any tape from the source DC circuit breaker switch handle Step 12 Verify that the power cable ends at the power source are connected Step 13 Restart power by moving the circuit breaker switch handle to the on position Step 14 If you powered off the appliance because you are removing and replacing both power supply modules power it back on If you replaced...

Page 24: ...fore performing any of the following procedures ensure that power is removed from the DC circuit Statement 1003 Warning This unit is intended for installation in restricted access areas A restricted access area can be accessed only through the use of a special tool lock and key or other means of security Statement 1017 Warning This product requires short circuit overcurrent protection to be provid...

Page 25: ...r or place a piece of adhesive tape over the circuit breaker handle to prevent accidental power restoration while you are working on the circuit Step 2 Verify that the power switch on the power supply you are removing is in the STANDBY position Step 3 Remove the terminal block cover by simultaneously squeezing the left and right sides of the terminal block and at the same time pull the cover off t...

Page 26: ...er Supply Module Step 5 Using an M4 nut driver loosen and remove the nut and lock washer from the power supply ground wire lug Figure 4 22 Figure 4 22 Removing the Source DC Cables from the Power Supply Module Step 6 Remove the DC negative positive and ground cables 1 Source DC negative cable 2 Source DC positive cable 3 Source DC ground cable 1150W DC 3 2 1 334529 ...

Page 27: ...pply module installed except for the ASA 5585 X SSP 60 which ships with two power supply modules You can replace the fan module in the ASA 5585 X if necessary The fan module is hot pluggable You can install or replace the fan module without powering down the ASA 5585 X as long as the power supply module is active and functioning correctly To maintain airflow both bays must be populated by either a...

Page 28: ...llow these steps Step 1 From the right hand side of the back panel of the ASA 5585 X loosen the captive fan module screws until they release Step 2 Remove the fan module by grasping the handle and pulling the fan module away from the chassis 1 Fan module and module handle 2 Fan module screws 3 Power supply module Cisco ASA 1200W AC 100 240V 15 0 8 0 A 56 60Hz IN OK FAN OK OUT FAIL Cisco ASA FAN 25...

Page 29: ...ail kit hardware Note The slide rail kit hardware ships with the ASA 5585 X To install the slide rail kit hardware on the ASA 5585 X follow these steps Step 1 Power off the appliance Step 2 Remove the power cable from the appliance Step 3 If your appliance has the fixed cable management brackets do the following a Remove the cable management brackets from the front sides of the appliance b Remove ...

Page 30: ...ed to install on the appliance Figure 4 25 Brackets for the Slide Rail Kit Installing and Removing a Slide mounted Chassis Note A slide rail kit ships with the ASA 5585 X After you have installed slide rail hardware on the appliance you can install the slide rails in the rack and install the chassis This section describes how to install and remove rack slide rails and the ASA 5585 X and contains t...

Page 31: ...rail and push forward to engage the pins in the rack until the clip clicks and locks around the rack post Figure 4 26 Note The slide rails are labeled left and right Install the left slide rail on the left side of the rack and the right slide rail on the right side of the rack Figure 4 26 Press and Push to Install the Slide Rail For square hole posts square studs must be attached fully inside the ...

Page 32: ...the rack post with the provided 10 32 screws by tightening the screws at the front and rear end of the slide rail to the rack post Figure 4 28 Both front and rear rack posts must be secured with the screws before you install the chassis Caution It is critical that the screws are installed and secured to the front and rear end of the slide rails Note The rack opening the distance from the front to ...

Page 33: ...a Slide mounted Chassis Figure 4 28 Securing the Slide Rail to the Rack Post Step 3 For square hole racks install one 10 32 cage nut on each side of the rack rail Figure 4 29 Leave one square hole spacing above the slide rail The cage nut will be used later to secure the chassis to the rack post For threaded hole racks no additional hardware is needed 332655 ...

Page 34: ...4 29 Installing the 10 32 Cage Nuts Step 4 Install the chassis on the outer rail Make sure that the U bars are aligned to the outer rail evenly then push the chassis into the rack Figure 4 30 Caution Before installing the chassis make sure that the slide rails are properly installed and that the perforated holes on the outer slide rail align with the perforated holes on the chassis 332656 ...

Page 35: ...he Chassis on the Outer Rail Step 5 Tighten the screws to secure the chassis to the rack Figure 4 31 Use the upper hole to secure the chassis to the rack a For square hole racks secure the chassis to the rack by installing the 10 32 screw into the cage nut that you installed in Step 3 b For threaded hole racks secure the front of the chassis by installing the 10 32 screws into the rack threaded ho...

Page 36: ... X Adaptive Security Appliance Hardware Installation Guide OL 22567 02 Chapter 4 Maintenance and Upgrade Procedures Installing and Removing a Slide mounted Chassis Figure 4 31 Securing the Chassis to the Outer Rail 330563 ...

Page 37: ...dures Installing and Removing a Slide mounted Chassis Removing the Chassis from the Rack To remove the chassis from the rack follow these steps Step 1 Remove the screws from the front brackets of the rail post Figure 4 32 Figure 4 32 Removing the Screws from the Outer Rail Step 2 Pull the chassis out to the locked position 330599 ...

Page 38: ...e mounted Chassis Step 3 Press down the release hook to remove the chassis from the rack Figure 4 33 Figure 4 33 Pressing Down the Release Hook Step 4 Remove the two screws from the front and rear of the rack that are securing the slide rail and release the latch and pull out the rails Figure 4 34 Figure 4 34 Releasing the Latch to Pull Out the Rails 330564 330565 ...

Page 39: ...ollowing Power off the adaptive security appliance Remove the power cable from the adaptive security appliance Remove the old adaptive security appliance from the rack Step 2 Position the front bracket on the side of the adaptive security appliance and line up the bracket screws with the screw holes on the adaptive security appliance Step 3 Tighten the screws into the chassis Step 4 Repeat this pr...

Page 40: ...of rack depths Step 9 Install the proper slide mount brackets on to the rear bracket on the chassis Step 10 For added security screw in the front slide rail brackets to the rack Step 11 Secure the slide brackets to the corresponding holes in the rear rack rail using the screws provided 330136 PW R BO OT AL AR M AC T VP N PS 1 HD D1 PS 0 HD D0 USB RESET 0 SFP1 SFP0 1 0 1 2 3 4 5 6 7 MGMT 0 1 AUX CO...

Page 41: ... the cable management brackets on the ASA 5585 X follow these steps Step 1 Power off the adaptive security appliance Step 2 Remove the power cable from the adaptive security appliance Step 3 Position the cable management brackets on the front side of the adaptive security appliance and line up the bracket screws with the screw holes on the adaptive security appliance Figure 4 35 shows the cable ma...

Page 42: ... 4 35 Cable Management Brackets for the Fixed Rack Mount Figure 4 36 Cable Management Brackets for the Slide Rail Step 4 Tighten the screws into the rack Step 5 Re attach the power cable to the adaptive security appliance Step 6 Organize the cables through the cable management brackets on the adaptive security appliance Step 7 Power on the adaptive security appliance 253973 333053 ...

Page 43: ...e sure all cables are properly aligned and securely connected for all external and internal components Remove and check all data and power cables for damage Make sure no cables have bent pins or damaged connectors Make sure each connector is properly seated If a device has latches make sure they are completely closed and locked Check any interlock or interconnect indicators that indicate a compone...

Page 44: ...4 44 Cisco ASA 5585 X Adaptive Security Appliance Hardware Installation Guide OL 22567 02 Chapter 4 Maintenance and Upgrade Procedures Troubleshooting Loose Connections ...

Reviews: