Cisco ASA 5506-X Скачать руководство пользователя | Manualshive

Страница: 2 / 52

background image

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright

©

1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED

“

AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:

http://

www.cisco.com/go/trademarks

. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership

relationship between Cisco and any other company. (1110R)

©

2015-2017 Cisco Systems, Inc. All rights reserved.

«
1
2
3
4
...
»

Содержание ASA 5506-X

Страница 1: ...stallation Guide First Published 2015 04 07 Last Modified 2017 06 16 Americas Headquarters Cisco Systems Inc 170 West Tasman Drive San Jose CA 95134 1706 USA http www cisco com Tel 408 526 4000 800 553 NETS 6387 Fax 408 527 0883 Text Part Number Online Only ...

Страница 2: ...MPLIED INCLUDING WITHOUT LIMITATION THOSE OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING USAGE OR TRADE PRACTICE IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT SPECIAL CONSEQUENTIAL OR INCIDENTAL DAMAGES INCLUDING WITHOUT LIMITATION LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THI...

Страница 3: ... C H A P T E R 2 Installation Preparation 23 Installation Warnings 23 Position the ASA 24 Mount and Deployment Preparation for the ASA 5506W X 25 Safety Recommendations 25 Maintain Safety with Electricity 26 Prevent Electrostatic Discharge Damage 26 Site Environment 26 Site Considerations 27 Power Supply Considerations 27 Equipment Rack Configuration Considerations 27 C H A P T E R 3 Mount and Con...

Страница 4: ...C 39 Connect to the Console Port with Microsoft Windows 39 Connect to the Console Port with Mac OS X 42 Connect to the Console Port with Linux 43 C H A P T E R 4 Maintenance and Upgrades 45 Connect the DC Adapter for the 5506H X 45 Install the Adjustable Power Supply Retainer 47 Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide iv Online Only Contents ...

Страница 5: ... X ASA 5506W X and ASA 5506H X The Cisco ASA 5506 X ASA 5506W X and ASA 5506H X adaptive security appliances are part of the ASA 5500 X of next generation mid range ASAs and are built on the same security platform as the rest of the ASA family Your ASA 5506 X ships with either ASA or Firepower Threat Defense software preinstalled To reimage your device see Reimage the Cisco ASA or Firepower Threat...

Страница 6: ...o can be mounted in a single rack shelf The ASA has a standard 1 RU chassis See Cisco ASA 5500 X Series Next Generation Firewalls to compare the performance metrics and capabilities of the 5500 X ASAs Do not stack the ASA chassis on top of another ASA chassis If you stack the units they will overheat which causes the units to power cycle Caution Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardwar...

Страница 7: ...h four single band inverted F antennas two 2 4 GHz and two 5 GHz which are evenly spaced inside the top of the chassis Peak gains are approximately 3 dBi in the 2 4 GHz band and 5 dBi in the 5 GHz band ASA 5506H X Features The ASA 5506H X is a hardened version of the 5506 X with a ruggedized chassis power supply SSD and four ports instead of eight It is ruggedized because it supports a much wider ...

Страница 8: ...s USB Console Cable Type A to Type B 2 Chassis 1 Brick power supply 4 Power cord 3 The following figure shows the package contents for the ASA 5506H X Note that the contents are subject to change and your exact contents might contain additional or fewer items Figure 2 ASA 5506H X Package Contents USB Console Cable Type A to Type B 2 Chassis 1 Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware I...

Страница 9: ...t panel Note that there are no connectors or LEDs on the front panel Figure 3 5506 X and 5506W X Front Panel The following figure shows the front panel of the ASA 5506H X Note that there are no connectors or LEDs on the front panel Figure 4 5506H X Front Panel Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide Online Only 5 Overview Front Panel ...

Страница 10: ...t RJ 45 8P8C network I O interfaces The ports are numbered from left to right 1 2 3 4 5 6 7 8 Each port includes a pair of LEDs one each for connection status and link status The ports are named and numbered Gigabit Ethernet 1 1 through Gigabit Ethernet 1 8 See Network Ports on page 11 for additional information 3 USB port A standard USB Type A port is provided that allows the attachment of an ext...

Страница 11: ...set button to disable the reset button The default is enabled Note Pressing the reset button on the ASA 5506W X does not affect the AP configuration but it causes any unsaved AP configuration to be lost because the system has rebooted After the system reboots if you want a default AP configuration use the hw module module wlan recover configuration command to recover the AP configuration Note 7 Th...

Страница 12: ...hat allows the attachment of an external device such as mass storage See Internal and External Flash Storage on page 12 for additional information 6 Console ports Two serial ports a standard RJ 45 8P8C and a mini USB Type B are provided for management access via an external system See Console Ports on page 11 for additional information 5 Reset button A small recessed button that if pressed for lon...

Страница 13: ...Normal system function Amber Critical alarm indicating one or more of the following Major failure of a hardware or software component Over temperature condition Power voltage outside the tolerance range 2 Power Power supply status Unlit Power supply off Solid green Power supply on See Power Supply Modules on page 13 for additional power information specific to your specific ASA 1 Cisco ASA 5506 X ...

Страница 14: ...pair Amber When the ASA is in an HA pair the LED is amber for the Standby unit Unlit Failover is not operational 3 Network Port Status On the rear panel of the ASA 5506 X and ASA 5506W X a pair of LEDs link status and connection status for each of the eight Gigabit Ethernet network ports and the Gigabit Ethernet management port On the rear panel of the ASA 5506H X a pair of LEDs link status and co...

Страница 15: ...top from left to right Ports 2 and 4 are on the bottom from left to right The ports are between the Status LEDs and the console and management ports The ports are named and numbered Gigabit Ethernet 1 1 through Gigabit Ethernet 1 4 Console Ports The ASA has two external console ports a standard RJ 45 port and a Mini USB Type B serial port Only one console port can be active at a time When a cable ...

Страница 16: ...a data storage device The external USB drive identifier is disk1 When the ASA is powered on a connected USB drive is mounted as disk1 and is available for you to use Additionally the file system commands that are available to disk0 are also available to disk1 including copy format delete mkdir pwd cd and so on If you insert a USB drive with more than one partition only the first partition is mount...

Страница 17: ...chassis If you stack the units they will overheat which causes the units to power cycle Caution Rack mountable in a rack tray You can place two chassis side by side See Rack Mount the ASA on page 32 for more information One ASA 5506H X fits in the rack tray See Rack Mount the ASA on page 32 for more information Note Wall mountable ASA 5506 X and ASA 5506W X only see Wall Mount the ASA on page 30 f...

Страница 18: ...fications This section applies only to the ASA 5506 X and ASA 5506W X It does NOT apply to the ASA 5506H X Note Each power supply has a separate power cord Standard power cords are available for connection to the security appliance If you do not order the optional power cord with the system you are responsible for selecting the appropriate power cord for the product Using a non compatible power co...

Страница 19: ...A CAB ACU AC power cord United Kingdom IEC 60320 C13 JIS C8303 125V 12A CAB JPN 3PIN Power cord 3PIN Japan IEC 60320 C13 SABS 1661 250V 10A AIR PWR CORD SA AIR line cord South Africa IEC 60320 C13 GB2009 1 2008 250V 10A CAB ACC Power cord China IEC 60320 C13 IS 6538 1971 250V 10A CAB IND 10A Power cord India IEC 60320 C13 NBR 14136 250V 10A CAB C13 ACB AC power cord Brazil IEC 60320 C13 KSC8305 25...

Страница 20: ...isted in the table above Figure 8 CAB ACE Europe Cord set rating 10A 250V 2 Plug CEE 7 VII 1 Connector IEC 60320 C13 3 Figure 9 CAB AC North America Cord set rating 10A 125V 2 Plug NEMA 5 15P 1 Connector IEC 60320 C13 3 Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide 16 Online Only Overview Power Cord Specifications ...

Страница 21: ...ug A S 3112 1 Connector IEC 60320 C13 3 Figure 11 CAB ACI Italy Cord set rating 10A 250V 2 Plug CE123 16 VII 1 Connector IEC 60320 C13 3 Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide Online Only 17 Overview Power Cord Specifications ...

Страница 22: ... IRAM 2073 1 Connector IEC 60320 C13 3 Figure 13 CAB ACS Switzerland Cord set rating 10A 250V 2 Plug SEV 1011 1 Connector IEC 60320 C13 3 Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide 18 Online Only Overview Power Cord Specifications ...

Страница 23: ...g BS1363a SS145 1 Connector IEC 60320 C13 3 Figure 15 CAB JPN 3PIN Japan Cord set rating 12A 125V 2 Plug JIS C8303 1 Connector IEC 60320 C13 3 Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide Online Only 19 Overview Power Cord Specifications ...

Страница 24: ...2 Plug SABS 1661 1 Connector IEC 60320 C13 3 Figure 17 CAB ACC China Cord set rating 10A 250V 2 Plug GB2009 1 2008 1 Connector IEC 60320 C13 3 Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide 20 Online Only Overview Power Cord Specifications ...

Страница 25: ...IS 6538 1971 1 Connector IEC 60320 C13 3 Figure 19 CAB C13 ACB Brazil Cord set rating 10A 250V 2 Plug NBR 14136 1 Connector IEC 60320 C13 3 Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide Online Only 21 Overview Power Cord Specifications ...

Страница 26: ... Plug KSC8305 1 Connector IEC 60320 C13 3 Figure 21 CAB ACTW Taiwan Cord set rating 10A 250V 2 Plug CNS10917 1 Connector IEC 60320 C13 3 Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide 22 Online Only Overview Power Cord Specifications ...

Страница 27: ...em to the power source Warning Before working on a chassis or working near power supplies unplug the power cord on AC units disconnect the power at the circuit breaker on DC units Warning Before working on equipment that is connected to power lines remove jewelry including rings necklaces and watches Metal objects will heat up when connected to power and ground and can cause serious burns or weld ...

Страница 28: ...tor Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available Warning Ultimate disposal of this product should be handled according to all national laws and regulations Warning Installation of the equipment must comply with local and national electrical codes Warning The device is designed to work with TN power systems Warni...

Страница 29: ... recommend that you make a site map showing the ASA 5506W X locations so you can record the device MAC addresses from each location and provide them to the person who is planning or manage your wireless network Note Safety Recommendations Use the information in the following sections to help ensure your safety and to protect the chassis This information may not address all potentially hazardous si...

Страница 30: ...ge ESD occurs when electronic components are improperly handled and it can damage equipment and impair electrical circuitry resulting in intermittent or complete failure Always follow ESD prevention procedures when removing and replacing components Ensure that the chassis is electrically connected to an earth ground Wear an ESD preventive wrist strap ensuring that it makes good skin contact Connec...

Страница 31: ...igned to allow cooling air to flow effectively within it An open chassis allows air leaks which may interrupt and redirect the flow of cooling air from the internal components Always follow the ESD prevention procedures described previously to avoid damage to equipment Damage from static discharge can cause immediate or intermittent equipment failure Power Supply Considerations When installing the...

Страница 32: ...ke ports of the equipment above it in the rack Ensure that you provide adequate ventilation for equipment at the bottom of the rack Baffles can help to isolate exhaust air from intake air which also helps to draw cooling air through the chassis The best placement of the baffles depends on the airflow patterns in the rack Experiment with different arrangements to position the baffles effectively Ci...

Страница 33: ...A 5506H X in a DIN Rail page 34 Connect Cables Turn on Power and Verify Connectivity page 37 Connect to a Console Terminal or PC page 39 Desktop Mount the ASA You can mount the ASA on a desktop by placing it on a desk in a horizontal position Make sure there are no blockages or obstructions within one inch of the top of the ASA or within 5 inch of the sides and back so that nothing interferes with...

Страница 34: ... you are mounting the ASA onto something other than drywall such as wood or sheet metal anchors may not be required Step 3 Use a pencil ruler and level to mark locations for the two mounting screws The width and length of the ASA are 7 87 x 9 23 inches 20 x 23 44 cm The mounting holes in the chassis are in the middle length wise that is 6 372 inches from front and back while the holes are inset fr...

Страница 35: ...Figure 22 Marking the Locations of the Two Mounting Screws Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide Online Only 31 Mount and Connect Wall Mount the ASA ...

Страница 36: ...he ASA toward the wall until the screw heads are in the chassis and then slide the ASA down until it rests on the screws You can only mount the chassis with the front panel oriented toward either the ceiling or the floor Wall mounting in other orientation is not supported What to Do Next You can now install the cables and power cord as described in Connect Cables Turn on Power and Verify Connectiv...

Страница 37: ...on top of them such that the front of the device s and the front of the tray are in the same direction Step 3 Adjust the position of the first ASA and the tray until the three mounting holes in the dimples in the bottom of the shelf are aligned with the mounting holes in the bottom of the ASA Step 4 Tighten the captive tray screws into the shelf to lock it into place Figure 23 ASA 5506 X and ASA 5...

Страница 38: ...506H X in a DIN Rail You can use the 7 5 mm thick 45mm wide top hat DIN rail for the ASA 5506H X Secure the DIN rail to the mounting surface approximately every 7 8 inches 200 mm and use end anchors appropriately We recommend that you install the ASA 5506H X on a steel DIN rail for extra stability Note Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide 34 Online Only Mount an...

Страница 39: ...h the DIN rail bracket to the back of the chassis using the four screws provided Figure 25 Attaching the DIN Rail Bracket to the ASA 5506H X Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide Online Only 35 Mount and Connect Install the ASA 5506H X in a DIN Rail ...

Страница 40: ...tween the plastic latch and the metal hook Step 5 Position the chassis so that the hook on the DIN rail bracket hooks onto the top edge of the DIN rail The weight of the chassis can rest on the hook temporarily while the DIN rail bracket latches are secured Step 6 Push the DIN rail bracket latch up when the chassis is over the DIN rail to secure it This snaps the latch into the closed position whi...

Страница 41: ...ement computer directly with an Ethernet cable or you can connect the computer and the ASA to the same management network Be sure the PC is configured to obtain an IP address using DHCP You can configure any of the Gigabit Ethernet interfaces to be a management only interface using the management only command However you cannot disable management only mode on the Management 1 1 interface The follo...

Страница 42: ...rt the RJ 45 port becomes inactive Conversely when the USB cable is removed from the Mini USB Type B port the RJ 45 port becomes active See Connect to a Console Terminal or PC on page 39 for specific instructions for connecting the console port c Gigabit Ethernet ports For the network interfaces use standard RJ 45 Ethernet cables Step 2 Connect the power cord to the ASA and plug the other end to y...

Страница 43: ...e terminal or a PC To configure the ASA through the CLI you must establish a connection between the ASA console port and either a terminal or a PC This section describes how to connect to a console terminal or a PC and contains the following topics Connect to the Console Port with Microsoft Windows You must install a USB device driver the first time a Microsoft Windows based PC is connected to the...

Страница 44: ...are category Step 2 Install the driver Step 3 Connect a USB 5 pin Mini USB Type B to the USB console port as shown in the following figure Figure 29 ASA 5506 X and ASA 5506W X Console Port Connection Mini USB Type B to USB Type A console cable 2 Mini USB Type B console port 1 USB Type A 3 Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide 40 Online Only Mount and Connect Conn...

Страница 45: ...he cable with the DB 9 connector or USB Type A to the terminal or PC If your terminal or PC has a console port that does not accommodate a DB 9 connector you must provide an appropriate adapter for that port Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide Online Only 41 Mount and Connect Connect to the Console Port with Microsoft Windows ...

Страница 46: ...n use a separate terminal emulator application Step 1 Use the Finder to go to Applications Utilities Terminal Step 2 Connect the OS X USB port to the ASA Step 3 Enter the following commands to find the OS X USB port number Example macbook user cd dev macbook user ls ltr dev usb crw rw rw 1 root wheel 9 66 Apr 1 16 46 tty usbmodem1a21 DT macbook dev user Step 4 Connect to the USB port with the foll...

Страница 47: ...ple root usb suse cd dev root usb suse dev ls ltr ACM crw r r 1 root root 188 0 Jan 14 18 02 ttyACM0 root usb suse dev Step 4 Connect to the USB port with the following command followed by the ASA USB port speed Example root usb suse dev screen dev ttyACM0 9600 Step 5 To disconnect the Linux USB console from the Terminal window enter Ctrl a followed by then quit Cisco ASA 5506 X ASA 5506W X and AS...

Страница 48: ...Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide 44 Online Only Mount and Connect Connect to the Console Port with Linux ...

Страница 49: ...ct relies on the building s installation for short circuit overcurrent protection Ensure that the protective device is rated not greater than 36 VDC 5A Statement 1005 Warning This product requires short circuit overcurrent protection to be provided as part of the building installation Install only in accordance with national and local wiring regulations Warning The device is designed to work with ...

Страница 50: ...wer adapters have 18 AWG wires for the input connection Tinned bare wires are used for the input connection because there is no standard established for connector type Screw terminal blocks are most often used Note Step 3 Power on the ASA and check that it has power See LEDs on page 8 for information on the power LED Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide 46 Onlin...

Страница 51: ...n the 2 top screws item 1 in the figure above slightly to adjust the bracket for each power supply The Delta power supply uses the bracket extended to its tallest configuration This configuration has item 1 shifted to the bottom of the slot on the bracket over the power supply The LiteOn power supply uses the bracket extended to its shortest configuration This configuration has item 1 shifted to t...

Страница 52: ... installed power supply retainer Figure 33 Installed Power Supply Retainer Cisco ASA 5506 X ASA 5506W X and ASA 5506H X Hardware Installation Guide 48 Online Only Maintenance and Upgrades Install the Adjustable Power Supply Retainer ...

Отзывы:

Нет отзывов

Похожие инструкции для ASA 5506-X

Internet Backup

Бренд: Swisscom Страницы: 2

FVX538v1 - ProSafe VPN Firewall Dual WAN

Бренд: NETGEAR Страницы: 2

SecPath NS-HTIM-GMG2A

Бренд: H3C Страницы: 17

Бренд: Tosibox Страницы: 44

Бренд: McAfee Страницы: 32

Бренд: Juniper Страницы: 13

Бренд: XRoads Networks Страницы: 4

Бренд: Netgate Страницы: 56

Бренд: Netgate Страницы: 65

Бренды по названию

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Популярные бренды

Загрузить еще бренды